Trezor Data Breach Exposes Personal Data of Nearly 14,000 Customers

Trezor disclosed a data breach affecting nearly 14,000 customers due to unauthorized access at ShipMonk, its shipping partner. The breach exposed sensitive customer information, including full names, shipping addresses, phone numbers, and email addresses, primarily affecting orders shipped between May 10 and August 8, 2026. A total of 11,742 customers had full exposure, while 1,947 experienced partial exposure. The incident was reported by ShipMonk on August 10, 2026, and was attributed to a vulnerability in the Metabase analytics platform. Trezor's own systems were not compromised, and the company has contacted all affected customers. The breach raises concerns about potential phishing attacks targeting the exposed individuals. Trezor plans to introduce an Anonymous Delivery option to enhance customer privacy in future transactions.

Key Points: • Nearly 14,000 Trezor customers affected by a data breach at shipping partner ShipMonk. • Sensitive data exposed includes names, addresses, phone numbers, and email addresses. • Trezor's systems remain secure; the breach is linked to a vulnerability in Metabase.