Trezor Customer Data Leak Exposes 14,000 Users Through Shipping Partner Hack

Trezor users were hit by a customer data breach, though the incident did not stem from Trezor’s own systems. The data was exposed through the hardware wallet maker’s distribution network.

CoinDesk reported on August 14 that Trezor’s logistics and shipping partner, ShipMonk, was recently hacked, resulting in the exposure of personal information belonging to about 14,000 customers.

The leaked data included the names, email addresses, phone numbers and shipping addresses of 11,742 customers. Another 1,947 customers had their names, countries of residence and email addresses exposed. Users in the UK, US, Sweden, Colombia, Brazil and Italy were among those affected.

Trezor notified affected customers by email. So far, there is no indication the leaked data has been made public or sold, and no fraud or hacking cases tied to its misuse have been confirmed. Trezor’s own systems and hardware wallets were not affected by the incident.

Still, the breach has heightened industry concerns that hardware wallets can link a user’s identity and physical address to crypto holdings, regardless of whether the device itself is resistant to hacking. Binance founder Changpeng Zhao wrote that the leaked information could reveal both a user’s identity and home address as belonging to a crypto holder. That could lead to phishing, other fraud or threats to personal safety.

He added that the episode shows hardware wallets and software-based self-custody wallets carry different types of risk.