Trezor Breach Worse Than Reported: Another 67,000 US Customers Exposed

According to reporting by Bitcoin Magazine, hardware wallet manufacturer Trezor announced that a previously disclosed data breach is significantly worse than initially reported. Trezor stated that an additional 67,000 U.S. customers had their names, email addresses, phone numbers, shipping addresses, and order numbers exposed. The leaked information stems from orders placed between November 2019 and August 2021.

In August, Trezor initially reported that data belonging to 11,742 customers across multiple countries had been exposed. The expanded breach stems from Trezor's third-party shipping and fulfillment partner, ShipMonk, which experienced unauthorized access to its systems containing customer data. Trezor stated that ShipMonk failed to erase customer data despite repeatedly providing written assurances that the information had been deleted in accordance with contracts and data policies.

Additionally, another 1,947 customers had their names, cities, and emails exposed in the incident. Trezor confirmed that it has directly emailed all affected customers. Neither Trezor nor ShipMonk immediately responded to questions from Bitcoin Magazine regarding the incident.