TLDR
- Trezor says an additional 67,000 US customers had personal data exposed in a ShipMonk shipping provider breach
- The newly confirmed records cover orders placed between November 2019 and August 2021
- Exposed data includes names, emails, phone numbers, shipping addresses, and order numbers
- Trezor claims it had written assurances from ShipMonk that the data had been deleted
- Affected customers face phishing, scam calls, physical letters, and potential theft of crypto holdings
Trezor has confirmed that around 67,000 additional US customers had their personal data exposed in a breach at its shipping provider, ShipMonk. This expands the total impact well beyond the roughly 14,000 customers that Trezor first reported when it disclosed the breach on August 13.
Two days ago, we received an update from our shipping provider, ShipMonk. We're deeply saddened to share the news that the recent data breach affects more customers than originally thought.
Another 67,000 customers from the US who ordered between November 2019 and August 2021… https://t.co/yDQvTlAA2S
— Trezor (@Trezor) September 4, 2026
ShipMonk told Trezor on September 2 that more records had been found. These records date back to orders placed between November 2019 and August 2021.
The exposed data includes customer names, email addresses, phone numbers, shipping addresses, and order numbers. Trezor has now emailed all newly identified customers to warn them.
Trezor says its own systems were not breached. Its hardware wallets remain secure and no wallet funds were directly accessed.
The company said it had asked ShipMonk multiple times to delete old customer data. Trezor said it received written confirmation that the data had been removed, in line with its contract and data policy.
“We are very disappointed that, despite receiving this confirmation, the data was not deleted in their systems,” Trezor said.
Why This Puts Crypto Holdings at Risk
Even though no wallets were directly hacked, the leaked personal data opens the door to phishing attacks. Criminals can use names, addresses, and emails to impersonate Trezor and trick customers into giving up their seed phrases.
A seed phrase gives full access to a crypto wallet. If a user is tricked into sharing it, they can lose everything stored in that wallet.
Phishing and social engineering were the top causes of crypto losses in the first quarter of 2026. According to blockchain security firm Hacken, these scams accounted for $306 million of the $482 million lost across the industry during that period.
In July, one crypto investor lost close to $1 million after being tricked into approving a malicious transaction on the Ethereum network.
Physical Security Also a Concern
Customers with exposed home addresses face risks beyond online scams. Trezor warned affected users to watch out for fraudulent letters and scam phone calls, not just emails.
This mirrors what happened after a 2020 breach at rival hardware wallet maker Ledger. That breach exposed over 270,000 customers, with home addresses later published on a hacking forum. Ledger customers have reported receiving scam calls and physical letters for years since.
Trezor had a policy requiring fulfillment partners to delete or anonymize order data 90 days after delivery. ShipMonk’s failure to follow through on that policy is at the center of this breach.
In January 2024, Trezor had already warned around 66,000 users who contacted its support team since December 2021 that they were at risk of phishing.
The latest disclosure means the cumulative number of Trezor customers caught up in data exposure incidents now runs into the hundreds of thousands.
Trezor has not said whether it plans to take legal action against ShipMonk.
Stop guessing and start investing with confidence. KnockoutStocks gives you the AI insights, market intelligence, and stock research you need to spot opportunities, cut through the noise, and make smarter investment decisions — all in one powerful platform.
Sign up today and get 50% OFF full access to our premium stock picks.
Simply use coupon code SPECIAL50 at checkout to claim your exclusive discount.







