Trezor Alerts 14,000 Customers Following Fulfilment Partner Data Breach

Trezor has warned nearly 14,000 customers that their personal information was exposed after its fulfillment partner, ShipMonk, experienced unauthorized access to its systems.

The incident represents the first time Trezor customers’ shipping addresses have been exposed in a security breach.

According to Trezor, the breach compromised the names, email addresses, phone numbers and shipping addresses of 11,742 customers. Information belonging to another 1,947 customers, including names, cities and email addresses, was also affected. The impacted customers are located across the U.S., U.K., Sweden, Colombia, Brazil, Italy and Portugal.

“We have some difficult news to share,” Trezor said Thursday on X, explaining that one of its shipping providers had suffered a breach that exposed sensitive order information.

The incident comes amid a broader rise in global cyberattacks. Cybersecurity company SentinelOne reported that data breaches have increased 17% this year compared with 2025, with an average of 2,090 attacks occurring worldwide each week. Global breaches have also reportedly been increasing by about 3% month over month since January.

Trezor said it contacted all affected customers by email and clarified that customers who did not receive a notification were not impacted. The company told CoinDesk that it has not found evidence that the exposed information has been published, shared or sold. It also said there are currently no known scams or hacking attempts connected to the breach.

Customers who purchased Trezor products through Amazon were not affected because those orders are handled by a different fulfillment provider.

Trezor Devices Remain Secure

Trezor emphasized that its own systems were not breached and that its hardware wallets and users’ cryptocurrency remain secure.

The main threat is indirect, with exposed customers potentially facing a higher risk of phishing and social-engineering attacks through email, phone calls or physical mail. Criminals could use the stolen information to impersonate banks, crypto exchanges or Trezor representatives.

Personal information exposed during a data breach can remain useful to criminals for years. Stolen shipping and logistics records can be repurposed for future scams after being circulated or sold online.

In some cases, criminals have used home addresses to demand ransoms ranging from $700 to $1,000 or to send counterfeit devices directly to victims. Hardware companies can also face substantial long-term legal, remediation and reputational costs following major customer data leaks.

Crypto users are increasingly facing physical security risks as well. CertiK reported that in-person coercion attacks involving crypto holders totaled $124 million during the first half of the year, although not all of those incidents were connected to data breaches. DeepStrike has estimated that data breaches cost victims tens of billions of dollars globally each year.

Trezor’s Previous Security Incidents

Trezor said the latest incident is the first breach in its 13-year history to expose customers’ phone numbers and shipping addresses.

However, Satoshi Labs, the company behind Trezor, previously disclosed a breach involving a third-party support portal in January 2024 that affected 66,000 people. Another incident in April 2022 compromised information belonging to 106,856 Trezor customers.

Trezor said its internal firmware and on-device cryptography have never been remotely compromised to steal users’ funds.

Other hardware wallet companies have faced similar incidents. Ledger suffered a data breach in January that was linked to its third-party e-commerce provider, Global-e. The company also experienced a major breach in 2020 involving nearly 300,000 users. In 2021, scammers used information from that incident in a phishing campaign that involved sending fake Ledger devices to affected customers.

About The Author

ctleditor

See author's posts