ShipMonk Data Breach Affects 67,000 Trezor Customers

Cryptorank

ShipMonk Data Breach Affects 67,000 Trezor Customers

First seen 4 Sep 2026, 14:46 UTC • •52.5

Article Content

1 / 13

Browse articles

ThreatCluster •September 5, 2026 at 13:48 UTC

•67,000 additional Trezor customers affected by ShipMonk data breach.
•Older order records that should have been deleted were leaked.
•Breach significantly expands the scope of an earlier reported incident.

Trezor has confirmed that a data breach involving its fulfillment provider, ShipMonk, has exposed personal and order information of approximately 67,000 additional U.S. customers. This breach significantly expands the scope of an incident initially reported in August 2026. The exposed data includes older U.S. order records that should have been deleted but remained in the leaked dataset. The breach relates to Trezor orders processed during a partnership with ShipMonk that lasted from November 2019 to 2021. As of September 4, 2026, Trezor has acknowledged the breach and is working to inform affected customers. The incident raises concerns about data retention practices and the handling of sensitive customer information by third-party vendors.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 49d ago How this analysis works

Timeline

2026-08-01

Initial data breach reported

Trezor first reported a data breach involving ShipMonk, affecting an unspecified number of customers.

2026-09-02

Trezor informed of expanded breach

Trezor was notified that the breach included additional data from older U.S. orders.

Cybersecuritynews

2026-09-04

Trezor confirms breach details

Trezor publicly confirmed the breach affecting 67,000 additional customers and the nature of the leaked data.

More articles in this cluster (12)

Threat Graph

4 entities, 3 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (1)

Data Breach

Organization (2)

ShipMonk
Trezor

Weakness (1)

CWE-200 - Exposure of Sensitive Information

Relationships

Data Breach related to ShipMonk
Data Breach related to Trezor
Data Breach related to CWE-200 - Exposure of Sensitive Information

Following this threat?

Track ShipMonk in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…

Korean-speaking Hackers Target PHP Vulnerabilities in Global Campaign A cybersecurity report from Cyfirma reveals that attackers, possibly linked to North Korea's Lazarus group, are preparing to exploit critical vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619). These vulnerabilities allow unauthenticated remote code execution, posing a significant threat to government…