Trezor reports data from 14K users exposed through shipping provider
Reported by Cointelegraph · AI-assisted summary by ChikoCorp AI News Desk
AI-generated summary based on the linked source; not independently verified. This is not investment advice. Verify market-moving details at the original publisher before acting. See our editorial policy, AI content policy, and financial disclaimer.
Summary
Cryptocurrency wallet company Trezor reported that personal data of approximately 14,000 users was exposed through its shipping provider, ShipMonk. The data breach potentially affects customers who received products from several countries between May 10 and August 8, 2026. Trezor emphasized that users’ devices, private keys, and backups remain secure, but warned of increased risk of phishing attacks using compromised personal information.
Why it matters
The exposure of personal data raises the risk of sophisticated phishing attempts targeting affected users. Trezor indicated that scammers could leverage the leaked information to impersonate banks, crypto exchanges, or Trezor itself, which could threaten users' security. This incident highlights ongoing threats to crypto holders from scammers using personal data to exploit victims via emails, phone calls, and physical letters.
Key context
This data breach follows a prior January 2024 incident where about 66,000 Trezor users who contacted support were reported at risk of phishing attacks. The crypto community has reported various scam techniques, including fake debt demands, impersonation of authorities, and fraudulent communications pretending to be family members or trusted entities. These repeated incidents underscore persistent vulnerabilities in protecting user information tied to cryptocurrency services.
Key numbers and entities
The data breach potentially affected 14,000 Trezor users. Specifically, 11,742 users may have had their name, physical address, phone number, and email exposed, while 1,947 users potentially had their name, city, and email leaked. Affected countries include the US, UK, Sweden, Colombia, Brazil, Italy, and Portugal. The shipping provider involved is ShipMonk. Trezor is the wallet provider reporting the breach.
What remains unclear
The source does not provide details on how the breach occurred at the shipping provider or what specific data security measures ShipMonk employed. It also does not specify if any phishing attacks have been confirmed following the exposure. The extent to which affected users have been notified or supported beyond the initial warning is not detailed.