Trezor discloses data breach affecting 13,689 customers

The firm warned that exposed customers may face targeted phishing emails, calls or other impersonation attempts.

Trezor on Thursday disclosed that ShipMonk, one of its shipping providers, suffered a data breach that exposed the order information of 13,689 customers across seven countries.

The incident affected customers in the US, UK, Sweden, Colombia, Brazil, Italy and Portugal who received orders between May 10 and Aug. 8, 2026.

The breach exposed names, email addresses, phone numbers and shipping information, according to Trezor.

The hardware wallet maker said 11,742 customers experienced full exposure of their name, email, phone number and shipping address, while 1,947 customers had partial exposure involving their name, city and email.

Trezor said the breach did not compromise its systems or devices and that its strict 90-day data retention policy limited the amount of information available to the shipping provider.

The company warned that affected customers could face targeted phishing attempts and urged them to use only official Trezor channels and never disclose their wallet backup.

Disclosure: This article was edited by Editorial Team. For more information on how we create and review content, see our Editorial Policy.