Trezor Data Breach Leaks Home Addresses of 13,689 Crypto Users

Trezor warned 13,689 customers that their personal information was exposed after an unauthorized actor breached systems at fulfillment provider ShipMonk.

The hardware wallet maker said ShipMonk notified it on Aug. 10 after discovering unauthorized access to systems containing customer order data. Trezor’s own infrastructure, devices and wallet backups were not compromised.

The incident affected customers in the United States, United Kingdom, Sweden, Colombia, Brazil, Italy and Portugal. Of those affected, 11,742 had their names, email addresses, phone numbers and shipping addresses exposed. Another 1,947 customers had names, cities and email addresses compromised, although Trezor said it is still verifying whether some of those partial records came from orders older than 90 days.

The breach is especially sensitive because shipping information can identify not only a cryptocurrency holder but also where they live. That creates potential risks ranging from highly targeted phishing and fraudulent letters to physical targeting.

Physical attacks on crypto holders have become a growing security concern. Chainalysis said home invasions accounted for 37% of violent crypto incidents in 2026, up from 26% in 2023, while approximately $30 million had already been stolen through violent attacks by mid-year.

There have been no confirmed scams or physical attacks linked to the ShipMonk breach so far. Trezor nevertheless warned affected users to distrust emails, phone calls or physical letters demanding urgent action and to never enter a wallet backup or recovery phrase into a website.