ShipMonk Data Breach Exposes Personal Data of 67,000 Additional Trezor Customers

Gbhackers •Divya • September 4, 2026

Trezor has revealed that a data breach involving its fulfillment provider, ShipMonk, exposed personal and order information of approximately 67,000 additional US customers. This significantly broadens the scope of an incident initially reported in August. The newly identified data pertains to Trezor orders processed during a prior partnership with ShipMonk, which lasted from November 2019 […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

ShipMonk Data Breach Affects 67,000 Trezor Customers Trezor has confirmed that a data breach involving its fulfillment provider, ShipMonk, has exposed personal and order information of approximately 67,000 additional U.S. customers. This breach significantly expands the scope of an incident initially reported in August 2026. The exposed data includes older U.S. order records that should have been deleted but remained in the leaked dataset. The breach relates to Trezor orders processed during a partnership with ShipMonk that lasted from November 2019 to 2021. As of September 4, 2026, Trezor has acknowledged the breach and is working to inform affected customers. The incident raises concerns about data retention practices and the handling of sensitive customer information by third-party vendors. 12 sources 53

Extracted Entities

ShipMonk Data Breach Exposes Personal Data of 67,000 Additional Trezor Customers

The full story

Extracted Entities

Attack Types (1)

Companies (2)

CWE Weaknesses (1)