Trezor Confirms ShipMonk Data Breach Exposed 67,000 Additional US Customers

Cybersecuritynews •Guru Baran • September 4, 2026

Hardware wallet maker Trezor has confirmed that a data breach at logistics partner ShipMonk is substantially larger than first reported, after older U.S. order records that should have been deleted remained in the leaked dataset. On September 4, 2026, Trezor said it was told two days earlier that the incident also included order data from […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

ShipMonk Data Breach Affects 67,000 Trezor Customers Trezor has confirmed that a data breach involving its fulfillment provider, ShipMonk, has exposed personal and order information of approximately 67,000 additional U.S. customers. This breach significantly expands the scope of an incident initially reported in August 2026. The exposed data includes older U.S. order records that should have been deleted but remained in the leaked dataset. The breach relates to Trezor orders processed during a partnership with ShipMonk that lasted from November 2019 to 2021. As of September 4, 2026, Trezor has acknowledged the breach and is working to inform affected customers. The incident raises concerns about data retention practices and the handling of sensitive customer information by third-party vendors. 12 sources 53

Extracted Entities

Trezor Confirms ShipMonk Data Breach Exposed 67,000 Additional US Customers

The full story

Extracted Entities

Attack Types (1)

Companies (2)

CWE Weaknesses (1)