Trezor says 67,000 more US customers affected by ShipMonk data breach

Trezor announced today that the ShipMonk data breach disclosed last month affected an additional 67,000 US customers who ordered products between November 2019 and August 2021.

The original breach disclosure covered 13,689 customers, with 11,742 experiencing full exposure and 1,947 partial exposure. The compromised records contained names, email addresses, phone numbers, shipping addresses and order numbers. Trezor said the affected data spans customers in the US, UK, Sweden, Colombia, Brazil, Italy and Portugal.

Trezor said it has emailed all affected customers and that anyone who did not receive a notification is not among the newly identified group.

According to Trezor, the company had repeatedly obtained written assurances from ShipMonk that customer information had been deleted under the terms of their agreement. Trezor said it was disappointed to discover that the data remained in ShipMonk’s system despite those confirmations.

The breach did not compromise Trezor’s own systems or devices, the company said. However, exposed personal information could increase the risk of phishing, impersonation attempts and other targeted attacks.

The company urged affected users to watch for fraudulent emails, calls and letters and never disclose their wallet backup or enter it onto a website. The team added that they are working to offer anonymous delivery to better protect customer information for future orders.