Trezor Supply Chain Breach Now Impacts 81,000 Customers
Trezor says a breach at shipping partner ShipMonk exposed data of 81,000 customers, 67,000 more than first reported, including orders back to 2019.
Trezor's September 4 update revealed that stolen ShipMonk data also included order data from November 2019 to August 2021, expanding the incident beyond the May 10 to August 8, 2026 window disclosed on August 13, and raising affected customers to 81,000, a 479% increase over the original estimate. Exposed fields include names, emails, phone numbers, shipping addresses, and order numbers; no wallet credentials or recovery seed data were reported stolen. Trezor blamed ShipMonk for retaining data despite repeated written deletion assurances, is considering legal action, and warned customers of heightened phishing, scam calls, and physical security risks.
- Victim count jumped from roughly 14,000 to 81,000 after ShipMonk data from November 2019 to August 2021 was found stolen.
- Exposed data includes names, emails, phone numbers, shipping addresses, and order numbers; no recovery codes reported stolen.
- Trezor says ShipMonk repeatedly provided written deletion assurances that proved false; legal action is under consideration.
- Trezor warns of heightened phishing, scam calls, and physical security risks; accelerating anonymous delivery options.
- Victims
- Trezor
From the original article
2 min read at infosecurity-magazine.com
Crypto wallet-maker Trezor says a data breach at supplier ShipMonk is far worse than originally thought
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.