Trezor data breach affects 67,000 more US users

• Trezor says another 67,000 US customers were affected by the ShipMonk data breach.
• The exposed records include names, emails, phone numbers, shipping addresses and order details.
• The newly identified customers ordered Trezor products between November 2019 and August 2021.

Trezor said another 67,000 US customers were affected by a data breach at shipping provider ShipMonk, bringing the identified total to nearly 81,000.

The newly identified customers placed orders between November 2019 and August 2021, expanding the scope beyond the 13,689 customers disclosed in August.

The exposed records included customer names, email addresses, phone numbers, shipping addresses and order details, according to Trezor.

Trezor said the data remained with ShipMonk despite previous written assurances that the records had been deleted under their agreement.

The breach did not compromise Trezor’s own systems or hardware wallets, but exposed information could enable phishing and social engineering attacks.

Trezor said affected customers were contacted by email, while customers who did not receive a notification were not part of the newly identified group.

The company has also said it is working towards anonymous delivery for future US orders to reduce the amount of customer information exposed through shipping records.