Trezor Data Breach Expands: Additional 67,000 U.S. Customers Affected

Hardware wallet manufacturer Trezor has disclosed that a data breach first reported last month is more severe than initially believed. The company announced that an additional 67,000 U.S. customers had their personal information compromised, including names, emails, phone numbers, shipping addresses, and order numbers.

The leaked data pertains to orders made between November 2019 and August 2021. Initially, Trezor reported that 11,742 customers from various countries, including the U.S., UK, and Brazil, were affected. However, a recent update from Trezor's shipping partner, ShipMonk, revealed the larger scope of the breach.

In addition to the 67,000 customers, another 1,947 individuals had their names, cities, and emails exposed. Trezor expressed disappointment over ShipMonk's failure to delete customer data as previously assured, stating, "Throughout our entire relationship with ShipMonk, we repeatedly requested and received written assurance confirming the deletion of the data. We are very disappointed that, despite receiving this confirmation, the data was not deleted in their systems."

The breach was attributed to unauthorized access to ShipMonk's systems, which Trezor had previously reported. The company has reached out directly to all affected customers and is currently investigating the incident. Trezor, a leading provider of Bitcoin hardware wallets, has faced scrutiny in the past regarding customer data security.