Trezor Warns 14,000 Customers After Data Breach

Trezor has notified nearly 14,000 customers that their personal data was exposed after its shipping partner, ShipMonk, suffered unauthorized system access.

The breach compromised names, emails, phone numbers and shipping addresses for 11,742 customers, and names, cities and emails for another 1,947, across the US, UK and several other countries. Trezor’s own systems and wallets remain secure, but this marks the first breach exposing customer shipping addresses in its 13-year history.

The company said it has no confirmed cases of the data being sold or misused yet, though customers now face higher phishing risks. Amazon orders were unaffected, as those ship through a separate partner.

Global data breaches are up 17% this year, according to SentinelOne. Trezor previously disclosed breaches in 2022 and 2024, while rival Ledger has faced similar incidents tied to third-party partners.