Approx. 67,000 Additional US Trezor Customer Addresses Leaked: Hardware Wallets Remain Secure

Trezor announced that the ShipMonk data breach has affected approximately 67,000 additional US customers; while leaked addresses and contact information create new security risks, it was stated that hardware wallets remain unaffected.

Hardware wallet manufacturer Trezor announced that the breach at ShipMonk, a third-party service provider managing order and shipping records, is far more extensive than previously disclosed. The new scope includes approximately 67,000 US customers, whose names, emails, phone numbers, delivery addresses, and order numbers were exposed.

The company had previously reported that information for approximately 14,000 customers was exposed. The newly identified records belong to orders placed between November 2019 and August 2021. Consequently, the breach has evolved into a larger data security issue, encompassing not only the digital contact information of Trezor users but also their physical delivery addresses.

Trezor users face fraudulent communication and physical risks

Trezor stated that its own systems were not breached and that hardware wallets are secure. No reports of fund loss or device compromise have been made in connection with the incident. The risk stems from the misuse of leaked customer records rather than a direct threat to assets in the wallets.

Sending emails to affected customers, the company advised caution against phishing messages, fraudulent phone calls, and letters. The exposure of delivery addresses increases potential risks to customers’ physical safety alongside fraud attempts.

Trezor stated that it had repeatedly requested ShipMonk to delete customer data throughout their relationship and received written assurances that the records had been removed. However, the company noted that despite these assurances, data continued to be held on the systems. The approximately 67,000 new records significantly expanded the scope of the breach from the initial announcement.