Trezor breach expands to about 80,000 customers after new shipping logs found
Trezor breach expands to about 80,000 customers after new shipping logs found
Trezor announced that a second set of shipping records from its logistics partner ShipMonk exposed contact and order information for roughly 67,000 additional U.S. customers. Together with the earlier disclosed 13,689 customers, the total number of potentially affected users is now about 80,689. The company has not published a combined figure or checked whether the two groups overlap.
Key numbers
- Original breach disclosed on Aug. 13 affected 13,689 customers.
- New data adds about 67,000 U.S. customers.
- Records cover orders from Nov 2019 through Aug 2021.
What data was exposed
The leaked records contain names, email addresses, phone numbers, shipping addresses and order numbers. This information can link a person’s identity and physical location to a Trezor hardware‑wallet purchase, creating opportunities for phishing and physical‑security attacks.
Wallets remain secure
Trezor confirmed that none of its wallet software, private keys, recovery seeds or funds were compromised. The breach only involved the fulfillment partner’s shipping data.
Potential phishing and physical threats
With the personal details exposed, scammers could craft convincing emails, calls or letters, and criminals might target owners at their home addresses. Trezor has not reported any confirmed downstream attacks using this data.
Overlap between groups not confirmed
Trezor has not released a combined list or performed a row‑level overlap check, so it is unclear whether some of the 67,000 newly disclosed records also appear in the earlier 13,689‑customer set.
