Trezor Data Breach Widens, Exposing 67,000 More US Customers

Trezor data breach — Trezor has disclosed that a recent data breach is significantly larger than initially reported, with an additional 67,000 U.S. customers having their personal information exposed.

The Prague-based hardware wallet manufacturer announced on Friday that the newly identified victims had their names, email addresses, phone numbers, shipping addresses, and order numbers leaked. The data pertains to orders placed between November 2019 and August 2021.

Trezor stated the breach originated at its third-party fulfillment partner, ShipMonk, which had provided repeated written assurances that the customer data had been deleted in line with contractual obligations. “We had no reason to expect it,” a Trezor spokesperson said, adding, “It should not have existed to be exposed.”

The company first reported the incident in August, initially stating that data from 11,742 customers across several countries had been compromised. Trezor says it has directly emailed all affected customers.