ShipMonk Data Breach Affects 67,000 Trezor Customers

Trezor has confirmed that a data breach involving its fulfillment provider, ShipMonk, has exposed personal and order information of approximately 67,000 additional U.S. customers. This breach significantly expands the scope of an incident initially reported in August 2026. The exposed data includes older U.S. order records that should have been deleted but remained in the leaked dataset. The breach relates to Trezor orders processed during a partnership with ShipMonk that lasted from November 2019 to 2021. As of September 4, 2026, Trezor has acknowledged the breach and is working to inform affected customers. The incident raises concerns about data retention practices and the handling of sensitive customer information by third-party vendors.

Key Points: • 67,000 additional Trezor customers affected by ShipMonk data breach. • Older order records that should have been deleted were leaked. • Breach significantly expands the scope of an earlier reported incident.