Trezor data breach expands to 67,000 more US customers
Shipping error exposes thousands more wallets
Trezor, a company that makes hardware wallets for storing digital assets, announced that a data breach affects 67,000 additional US customers. The earlier estimate was only 14,000 users.
The company said in a post on X that the breach came from its shipping provider, ShipMonk. Users who ordered hardware between November 2019 and August 2021 are at risk. Their full names, emails, phone numbers, addresses, and order details were exposed.
What the breach means for users
- Trezor systems themselves were not hacked or compromised.
- The risk comes from outside criminals using the leaked info for phishing scams.
- Attackers may pretend to be Trezor support to trick users into revealing their wallet seed phrases.
A seed phrase is a list of words that acts as the master key to a crypto wallet. If someone gets those words, they can move the funds.
Why this keeps happening
Phishing and social engineering scams are a major problem in crypto. In the first quarter of 2026, these scams caused $306 million in losses out of $482 million total. Hacken, a blockchain security firm, reported the figures.
In July, one investor lost nearly $1 million after clicking a malicious link that looked like a normal token approval.
What Trezor is doing
Trezor blames ShipMonk for not deleting the data from old orders. The company said it received written assurances from the shipping provider that the data was gone. It did not specify what next steps are being taken or if there will be compensation.
