coinedition.com
Nearly 14,000 Trezor customers had their personal information exposed after a security breach at ShipMonk, the shipping company used to handle some of the crypto wallet maker’s orders.
ShipMonk told Trezor that an unauthorized party had accessed systems containing customer order information. The breach affected customers in seven countries.
Personal Data Exposed
Trezor said 11,742 customers had their names, email addresses, phone numbers and shipping addresses exposed. Another 1,947 customers had their names, cities and email addresses leaked, bringing the total number of affected customers to about 13,700.
Related: Indian Retail F&O Traders Lost $40.36B in 5 Years, With Losses Every Year
The breach did not reach Trezor’s internal systems or compromise its hardware wallets, the company said.
“This is the first time since Trezor was founded in 2013 that we have experienced a breach that exposed customer phone numbers and shipping addresses,” Trezor said.
Phishing and Physical Risks
The exposed information could make it easier for criminals to target customers with phishing scams. Attackers could use the details to pose as Trezor, banks or crypto exchanges and make fraudulent messages look more convincing.
Shipping addresses also create physical security concerns for crypto holders, whose assets can make them targets for criminals.
Trezor is not the first crypto wallet maker to face a breach involving a third-party provider. Ledger suffered a similar incident in 2020 that exposed information belonging to more than 270,000 customers.
The threat can extend beyond online scams. Chainalysis reported that more than $30 million was stolen in violent attacks targeting crypto holders during the first half of 2026.
Related: The Dynamics of Crypto Users Making Decisions Based on Token Burns and Buybacks
(adsbygoogle = window.adsbygoogle || []).push({});