The hardware wallet manufacturer Trezor announced that the data breach at the logistics company ShipMonk was much larger than initially reported. The company stated that the personal information and order data of an additional 67,000 U.S. customers had been leaked.
According to Trezor, the recently identified customers are users who placed orders between November 2019 and August 2021. The exposed data includes customers' first and last names, email addresses, phone numbers, shipping addresses, and order numbers.
The company stated that all affected customers have been emailed directly, and users who did not receive a notification were not impacted by the data breach.
Trezor stated that during its cooperation with ShipMonk, it repeatedly requested the deletion of relevant customer data and received written confirmation of its deletion.
The company said this process should have been conducted in accordance with contracts, data processing policies, and previous correspondence between the parties, expressing deep disappointment that ShipMonk continued to store the data in its systems despite the provided confirmations.
The latest announcement significantly expands the scope of the data breach previously reported by Trezor. The initial statement said that the data of 11,742 customers who placed orders within 90 days prior to August 8, 2026, was fully exposed, and the data of 1,947 customers was partially exposed.
Trezor added that, despite the new developments, their own systems have not been hacked, and they have maintained the security of users' hardware wallets.
However, the company warned users that the leaked personal information could be used in fake emails, phone calls, fraudulent letters, and social engineering attacks. Risks to physical security related to the leakage of physical addresses were also noted.
Trezor reiterated that users should not share their wallet backups or recovery seed words with anyone and should not visit any websites for this purpose.
*This is not investment advice.
end-content
