Trezor Data Breach Worse Than Initially Reported

Hardware wallet manufacturer Trezor has said that a data breach first announced last month is worse than originally reported. 

The Prague, Czech Republic-based company said Friday that an additional 67,000 U.S. customers had their names, emails, phone numbers, shipping addresses and order numbers leaked. The leaked data came from orders made between November 2019 and August 2021, according to Trezor. 

Trezor first announced in August that data from 11,742 customers from the U.S., UK, Sweden, Colombia, Brazil, Italy, and Portugal had been exposed — with names, emails, phone numbers and shipping addresses leaked. 

Another 1,947 customers just had their names, cities and emails exposed in the breach. 

In Friday’s announcement, Trezor said that its third-party fulfillment partner, ShipMonk, had falsely reassured the company about deleting customer data. 

“Throughout our entire relationship with ShipMonk, we repeatedly requested and received written assurance confirming the deletion of the data, in line with our contract, data policy, and past communications,” Trezor wrote. 

“We are very disappointed that, despite receiving this confirmation, the data was not deleted in their systems.”

Neither Trezor nor ShipMonk immediately responded to Bitcoin Magazine’s questions.