Crypto Hardware Wallet Maker Trezor Reports 67K Additional US Customers Impacted In ShipMonk Data Breach

Hardware wallet maker Trezor has confirmed that a data incident at its fulfillment partner ShipMonk reached far more people than first announced. In a September 4, 2026 update to its official notice, the company said ShipMonk contacted it on September 2 with word that stolen files also contained order records from an earlier working relationship that ran from November 2019 through August 2021.

Those older files affect about 67,000 additional customers in the United States.

Added to the roughly 13,689 people named in the mid-August disclosure, the identified total now approaches 80,700.

Trezor said every newly identified buyer has been emailed from its security address.

Anyone who did not receive that message is not part of the expanded group.

The extra records include full name, email address, telephone number, shipping address, and order number.

Trezor repeated that its own infrastructure was not entered, and that devices, private keys, recovery phrases, and wallet backups were never part of the stolen set.

What leaked is the information a warehouse needs to print a label and hand a box to a courier. That combination still matters.

It marks a person as a confirmed owner of a hardware wallet and ties that person to a street address, which can make phishing emails, fake support calls, and mailed scams more convincing.