Trezor Reveals Data Breach Now Affects 67,000 Additional US Customers

Hardware wallet provider Trezor has confirmed that the impact of a recent data breach was significantly larger than first reported, now affecting an additional 67,000 customers in the United States. The exposed information affects users who placed orders between late 2019 and mid-2021, and includes sensitive personal details such as full names, email addresses, phone numbers, shipping addresses and order information.

According to Trezor, the breach originated from its shipping provider, which failed to delete customer data despite previously providing written assurances that it had done so. The company clarified that its own internal systems were not compromised in the incident.

Rising Risk of Phishing and Social Engineering Attacks

While the breach did not involve any direct security flaw in Trezor’s platform, exposed customer data significantly raises the risk of targeted phishing scams. Attackers could potentially use the leaked information to impersonate Trezor support and attempt to trick users into revealing sensitive wallet recovery information, which could lead to stolen digital assets.

This is not the first time Trezor has disclosed data exposure linked to its shipping partner. An earlier estimate placed the number of affected users at a much smaller figure before the scope of the breach became clearer. The company has previously acknowledged similar phishing risks tied to customer support interactions as well.

Security researchers have noted that phishing and social engineering tactics remain among the leading causes of financial losses across the crypto industry, often outweighing losses from technical exploits or code vulnerabilities.