Trezor Confirms 13,689 User Records Leaked Through Logistics Partner

Did you know? Buying a hardware wallet could be more dangerous than posting about luxury cars on social media.

From the moment you place your order, your name, phone number, and address are permanently linked to the label “holding crypto assets,” and this information may now be sitting in an Excel spreadsheet on a dark web seller’s computer.

Customers of Trezor were targeted.

On August 13, this leading hardware wallet provider confirmed that its logistics partner, ShipMonk, experienced unauthorized access, resulting in the exposure of names, email addresses, phone numbers, and full shipping addresses for 11,742 customers; additionally, names, cities, and email addresses of 1,947 customers were compromised, totaling 13,689 affected individuals. Affected users are located in the United States, the United Kingdom, Sweden, Colombia, Brazil, Italy, and Portugal.

Note that Trezor’s own system was not compromised; your hardware wallet remains secure, and your private key is still safe.

So where’s the problem?

The fact that you bought a Trezor has itself become a "target".

This turns a regular logistics database into a “list” in the eyes of potential attackers.

From a phishing email to someone knocking on your door