Trezor Shipping Provider Breach Exposes Data of 13,689 Customers

Hardware wallet manufacturer Trezor disclosed on August 13, 2026, that a data breach at its shipping provider, ShipMonk, exposed personal information for 13,689 customers. The incident, which the company said was discovered on August 10, affected users who received orders in the United States, United Kingdom, Sweden, Colombia, Brazil, Italy, and Portugal between May 10 and August 8, 2026.

According to Trezor, the breach compromised two distinct groups of customer data. The larger group, comprising 11,742 individuals, had their full names, email addresses, phone numbers, and shipping addresses exposed. The remaining 1,947 customers had partial information disclosed, including their names, cities, and email addresses. Order numbers were also among the data held by the logistics partner.

Trezor emphasized that its own systems, hardware wallets, and private keys were not compromised in the incident. The company stated that its 90-day data retention policy, which it requires fulfillment partners to follow, limited the scope of the breach by ensuring older order data had already been deleted or anonymized. All affected customers have been contacted individually by email from helptrezor.io.