Trezor Data Breach Via Logistics Partner ShipMonk Exposes Personal Data of 13,689 Hardware Wallet Customers

Trezor disclosed on August 13 that a data breach at ShipMonk, the third-party fulfillment and logistics partner responsible for storing and shipping its hardware wallets, exposed order data belonging to 13,689 customers across seven countries. The compromised information includes names and email addresses of buyers who purchased the popular Bitcoin wallet in recent months. Trezor warned affected customers of an elevated phishing risk following the exposure, urging vigilance against unsolicited communications.

The breach did not originate within Trezor's own systems but through its supply chain partner, underscoring the security risks hardware wallet makers face from third-party vendors handling sensitive customer order data.