Hardware wallet maker Trezor has confirmed that its August data breach now affects 81,000 customers — nearly six times the roughly 14,000 it originally disclosed on August 13. The additional 67,000 customers are all US-based and placed orders between November 2019 and August 2021. Their exposed information includes full names, email addresses, phone numbers, shipping addresses, and order numbers — the same categories of data exposed in the initial breach.
The expansion is not the result of a second attack. It stems from ShipMonk, Trezor’s shipping and logistics partner, failing to delete old customer data as required by its contract with Trezor. The company says it had repeatedly requested and received written confirmation from ShipMonk that historical order records were being purged — only to discover that ShipMonk had never followed through. “We are very disappointed that, despite receiving this confirmation, the data was not deleted in their systems,” Trezor said. Trezor’s own infrastructure and all hardware wallet devices remain secure; no funds or wallet security is at risk. The concern is entirely around what attackers can do with the personal data: the 81,000 affected customers are now prime targets for phishing emails, fraudulent calls, and text message scams designed to look like official Trezor communications.
How to check if you’re affected
Affected products are Trezor hardware wallets ordered via ShipMonk. If you ordered a Trezor device from the US between November 2019 and August 2021, or from Brazil, Colombia, Italy, Portugal, Sweden, or the UK between May 10 and August 8, 2026, your personal details were exposed. Trezor will notify affected customers by email. Any message — email, text, or phone call — asking you to verify your recovery seed phrase, confirm account credentials, or “secure” your wallet is a scam. Trezor will never ask for your seed phrase under any circumstances.