Trezor ShipMonk Data Breach Exposes Personal Data of Over 13,000 Hardware Wallet Customers

HomeCyber Security Trezor ShipMonk Data Breach Exposes Personal Data of Over 13,000 Hardware Wallet Customers By Guru Baran August 13, 2026 A third-party logistics breach has put thousands of Trezor hardware wallet buyers at higher phishing risk, even though Trezor’s own systems and devices were not compromised. On Monday, August 10, 2026, crypto hardware wallet maker Trezor said ShipMonk, one of its shipping providers, reported unauthorized access to systems holding customer order data. The incident did not touch Trezor infrastructure, wallets, or firmware, but it did expose personal details that scammers can weaponize in social engineering campaigns. According to Trezor, the breach affected roughly 13,689 customers who received orders between May 10 and August 8, 2026. Of those, 11,742 customers had full exposure of name, email address, phone number, and shipping address, while 1,947 had partial exposure limited to name, city, and email. WE HAVE SOME DIFFICULT NEWS TO SHARE. UNFORTUNATELY, ONE OF OUR SHIPPING PROVIDERS HAS EXPERIENCED A DATA BREACH THAT EXPOSED SENSITIVE ORDER DATA. THIS AFFECTS NEW CUSTOMERS IN THE US, UK, SWEDEN, COLOMBIA, BRAZIL, ITALY, AND PORTUGAL WHO RECEIVED AN ORDER WITHIN THE 90 DAYS… — Trezor (@Trezor) August 13, 2026 Trezor ShipMonk Data Breach Impacted shipments were tied to destinations including the United States, the United Kingdom, Sweden, Colombia, Brazil, Italy, and Portugal. Trezor stressed that the scope stayed relatively contained because of its strict 90-day data retention policy, which also applies to fulfillment partners. Under that policy, order-related personal data is deleted or anonymized 90 days after delivery, so older records were no longer held in ShipMonk systems and could not be accessed. ShipMonk is the logistics partner that stores Trezor products and ships parcels in the US, UK, and several other countries. To complete delivery, carriers require a recipient name, shipping address, phone number, and email, which is why the provider held that information at all. Trezor says only data needed for parcel fulfillment was involved: name, email, order number, phone number, and shipping address. The company has emailed affected customers from help@trezor.io. Anyone who did not receive that message is not part of the exposed set. If you are unsure, checking that inbox remains the clearest way to confirm status. Trezor was clear that devices remain secure and that company systems were not breached. The practical risk is secondary: attackers can use leaked contact and address data to craft convincing phishing emails, spoofed phone calls, fraudulent letters, or impersonation of banks, crypto exchanges, or even Trezor support. This is the first time since Trezor’s founding in 2013 that a breach has exposed customer phone numbers and shipping addresses, and the company called the situation serious while apologizing to those affected. Customers should treat any urgent request for personal details or wallet recovery information as hostile. Cross-check unexpected messages against official Trezor blog posts and social channels, and never enter a wallet backup seed on a website or share it with anyone claiming to be support. Paying with crypto, using disposable emails or virtual cards, and preferring a P.O. Box where practical can reduce future exposure when ordering physical hardware. Trezor also said an “Anonymous Delivery” option is planned, with dedicated checkout, locker pickup, neutral packaging, generic sender details, and automatic deletion of shipping identifiers after delivery, targeting the EU by September 2026 and the US by the end of 2026. Operationally, Trezor reports no disruption to products or services. The company is working with ShipMonk on the investigation, says the partner has secured and hardened the affected systems, and continues direct customer notification so people can stay alert. For help, Trezor points users to its support chat.  Strengthen Your SOC by Accelerating Threat Detection & Rapid Investigations. -> Integrate ANY.RUN With Your SOC Now. Tags cyber security cyber security news Copy URL Linkedin Twitter ReddIt Telegram Guru Baranhttps://cybersecuritynews.com Gurubaran KS is a cybersecurity analyst, and Journalist with a strong focus on emerging threats and digital defense strategies. He is the Co-Founder and Editor-in-Chief of Cyber Security News, where he leads editorial coverage on global cybersecurity developments. Cyber Security Guide Top 10 Malware Threats of the Week – AsyncRAT, Remcos, and Xworm Lead the Surge Three PhaaS Kits Targeting US Organizations to Steal M65 Logins by Bypassing MFA How Top SOCs Detect and Stop AI Phishing that Beats Email Gateways  Top 10 Phishing Kits Used by Hackers to Launch Cyberattacks (July 20-26, 2026) An SOC Story of Why Fast Answers Beat Perfect Answers in Cyber Incident Response  Latest Cyber News Cyber Security News Microsoft Exchange Server Vulnerabilities Enable DoS, Privilege Escalation, and RCE Attacks Cyber Security News North Korean IT Workers Use AI-Forged IDs and Remote Desktops to Become Trusted Employees Cyber Security News CISA Warns of Windows Ancillary Function 0-Day Vulnerability Exploited in Attacks Cyber Security News GitLab 19.2.2 Patches 13 Security Flaws, Including High-Severity XSS and CI/CD Authorization Flaws Cyber Security News Jewelbug APT Hijacks Browsers to Steal Cookies and Spy on Government Networks Expert Talks Expert Talks From Reactive Forensics to Predictive Defence: Strengthening Cyber Resilience in Banking  Expert Talks Beyond the Lure: What the DoNot Campaign Reveals About Modern Cyber Espionage  Expert Talks Your Incident Response Plan Has a Dependency You Never Approved Expert Talks Security in the AI Era Starts with First Principles  Cyber Security News Planning Your AI Security – How will You Manage All Your Resources?