
Trezor confirmed 13,689 buyers exposed in a ShipMonk data breach. Orders from May 10 to August 8 across seven countries at risk of phishing. Hardware remains secure.
Trezor confirmed August 13 that a data breach at its shipping provider ShipMonk exposed customer information for roughly 13,689 buyers. The hardware wallet maker said it has contacted impacted customers by email, according to its official incident notice.
The exposure covers orders shipped by ShipMonk between May 10 and August 8 across the US, UK, Sweden, Colombia, Brazil, Italy, and Portugal. Trezor said its own systems and devices were not compromised. The company warned that affected buyers may face increased phishing or social-engineering attempts referencing their recent orders or shipping details.
ShipMonk informed Trezor of unauthorized access on August 10. The investigation remains ongoing, the company said.
The breach exposed contact details and shipping addresses tied to recent orders. That data can make targeted scams more convincing. Hardware wallets themselves remain secure as long as seed phrases stay offline. Attackers may try to extract recovery phrases through spoofed emails, texts, or calls that reference specific order information.
Trezor has emailed impacted customers directly. The company said it will provide further updates through its incident notice as the investigation progresses.
The incident highlights supply-chain risk around logistics partners for crypto hardware vendors. ShipMonk handles fulfillment for multiple crypto hardware companies. While Trezor reported no compromise of its products, support workloads may increase as targeted phishing campaigns roll out.
Customers who received ShipMonk-fulfilled orders in the affected window should treat unsolicited outreach with suspicion. Verify communications through official channels. Never share a recovery seed.
Disclaimer: This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.
Drafted by a large language model from the source reporting linked above, then screened by automated publishing checks. It is not read by a journalist before publication. Some articles cite our Alpha Score. Verify prices and figures against the original source. Educational coverage, not personalized advice.