Trezor Data Breach Exposes 80,689 Customers to Phishing Risks

• •Over 80,000 Trezor customers' data exposed due to a breach at ShipMonk.
• •The breach was caused by a critical SQL injection vulnerability in Metabase (CVE-2026-72898).
• •Trezor devices remain secure, but customers are at increased risk of phishing attacks.

A significant data breach at Trezor's logistics partner, ShipMonk, has exposed personal information of approximately 80,689 customers, including names, email addresses, phone numbers, and shipping addresses. The breach was enabled by a critical SQL injection vulnerability (CVE-2026-72898) in the Metabase analytics platform, which allowed attackers to gain unauthorized access to customer data. The initial disclosure on August 13, 2026, reported 13,689 affected customers, but subsequent investigations revealed an additional 67,000 customers were impacted, with data dating back to orders from November 2019 to August 2021. Trezor has warned affected customers to be vigilant against phishing attempts, as the leaked information could be used for scams and fraudulent communications. The company has stated that its own systems remain secure and that no wallet funds were compromised. Investigations are ongoing, and Trezor is working on implementing more secure shipping options to protect customer data in the future.