Trezor Reveals Expanded Data Breach Linked to ShipMonk Affects Over 80,000 Users

Trezor, a leading manufacturer of cryptocurrency hardware wallets, disclosed that a security incident at its third‑party logistics partner, ShipMonk, has compromised the personal data of roughly 81,000 of its customers – a figure considerably higher than earlier estimates.

The compromised information is believed to include basic identifying details such as names, email addresses and shipping information that were shared with ShipMonk for order fulfillment. While no evidence suggests that private keys or wallet balances were exposed, the breach underscores the vulnerability of supply‑chain components that handle sensitive customer data.

Hardware wallets like those produced by Trezor are marketed as the most secure way for individuals to store digital assets, keeping private keys offline and away from internet‑connected threats. The devices themselves have not been found to be directly compromised; instead, the incident highlights how ancillary services can become an entry point for attackers seeking to gather intelligence on users.

Supply‑chain attacks have risen in prominence across the tech sector, as cybercriminals target the less‑guarded interfaces between manufacturers and their service providers. Logistics firms often store large volumes of customer data to streamline shipping, making them attractive targets for groups looking to harvest information that can be leveraged in phishing or social‑engineering campaigns.

In response, Trezor has urged affected customers to monitor their accounts for suspicious activity and to consider updating any associated passwords. The company is working with cybersecurity investigators and law‑enforcement agencies to determine the full scope of the intrusion and to bolster its data‑handling protocols. ShipMonk has reportedly begun its own internal review and is cooperating with the ongoing inquiry.

The episode arrives at a time when regulators worldwide are sharpening scrutiny of crypto‑related businesses and their data‑protection practices. Industry observers say the breach may prompt hardware wallet manufacturers to reevaluate their reliance on external fulfillment partners and to adopt stricter data‑privacy standards, potentially reshaping how crypto products are delivered to consumers in the future.