Trezor says ShipMonk breach affected another 67,000 customers

Hardware wallet maker Trezor said another approximately 67,000 U.S. customers were affected by a data breach at shipping provider ShipMonk, after initially reporting that nearly 14,000 customers had their personal information exposed.Trezor said Friday that ShipMonk informed it on Sept. 2 that the breach was larger than previously disclosed and included order data from customers who placed orders between November 2019 and August 2021. The newly identified records contain customers' names, emails, phone numbers, shipping addresses, and order numbers.The company said it had repeatedly asked ShipMonk to delete the data throughout their relationship and received written assurances that it had been removed in line with its contract, data policy, and previous communications. "We are very disappointed that, despite receiving this confirmation, the data was not deleted in their systems," Trezor said.Trezor systems not compromisedTrezor said its own systems were not compromised and its hardware wallets remain secure. The company said it has emailed all customers affected by the latest disclosure. It warned them to watch out for scam emails, fraudulent calls, and letters, as well as potential physical security risks.When Trezor first disclosed the breach on Aug. 13, it said 11,742 customers had their names, emails, phone numbers, and shipping addresses exposed, while another 1,947 had their names, cities, and email addresses leaked. Trezor said at the time that the breach was limited by a policy requiring fulfillment partners to delete or anonymize order data 90 days after delivery.Hardware wallet customers whose home addresses are exposed can face risks beyond phishing. A 2020 Ledger breach exposed information belonging to more than 270,000 customers, with names, email addresses, phone numbers and, in some cases, home addresses later published on a hacking forum. Ledger customers have continued to report receiving scam phone calls and physical letters years later.Disclaimer: The Block is an independent media outlet that delivers news, research, and data. As of November 2023, Foresight Ventures is a majority investor of The Block. Foresight Ventures invests in other companies in the crypto space. Crypto exchange Bitget is an anchor LP for Foresight Ventures. The Block continues to operate independently to deliver objective, impactful, and timely information about the crypto industry. Here are our current financial disclosures.© 2026 The Block. All Rights Reserved. This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.