Crypto▼ Bearish
Trezor Warns of Phishing Risk After 13,689-Customer Data Leak
A ShipMonk breach exposed names, addresses, and phone numbers of 13,689 Trezor customers. No wallet compromise, but phishing risk is high. Trezor plans Anonymous Delivery.
Continue with
Hardware crypto wallet company Trezor warned Thursday of heightened phishing risk after a breach at third-party logistics provider ShipMonk exposed personal information belonging to 13,689 customers.
The leaked data includes names, addresses, phone numbers and email addresses. Of the affected customers, 11,742 had full names, email addresses, phone numbers and shipping addresses exposed. The remaining 1,947 customers had partial data exposed, including names and email addresses.
ShipMonk notified Trezor on August 10 that an unauthorized actor had accessed systems containing customer data. ShipMonk provides logistics services for Trezor, including storing and shipping its products in several markets. The affected records primarily involved new-customer orders placed between May 10 and August 8, 2026, and shipped to the United States, United Kingdom, Sweden, Colombia, Brazil, Italy and Portugal.
Trezor said there was no evidence that wallet backups, cryptocurrency holdings, or its own systems were compromised. The company cautioned that the leaked data could be used to craft more convincing scams targeting affected users.
Trezor said its 90-day data-retention policy with logistics partners helped limit the scope of the incident because older order information had already been deleted or anonymized. The company is still working with ShipMonk to determine the exact exposure window for the 1,947 customers whose partial information was affected.