Trezor said a data breach at one of its shipping providers exposed customer order data for nearly 14,000 users.
In a post on X on Thursday, the hardware wallet maker said 13,689 customers in the US, UK, Sweden, Colombia, Brazil, Italy, and Portugal were affected. The company said those users had received an order in the 90 days prior to Aug. 8.
Trezor wrote: 「We have some difficult news to share. Unfortunately, one of our shipping providers has experienced a data breach that exposed sensitive order data. This affects new customers in the US, UK, Sweden, Colombia, Brazil, Italy, and Portugal who received an order within the 90 days…」 The post was dated Aug. 13, 2026.
What customer data was exposed
The Prague, Czech Republic-based company said its own systems and devices remain secure. It added that affected customers could see an increase in phishing attempts.
Trezor said 11,742 customers had their names, email addresses, phone numbers, and shipping addresses leaked. Another 1,947 customers had only their names, cities, and email addresses exposed.
The company also said: 「We are deeply sorry to the community and those affected.」
ShipMonk named as the third-party partner involved
In an email to Bitcoin Magazine, SatoshiLabs, Trezor’s parent company, said its third-party fulfillment partner ShipMonk had experienced unauthorized access to systems containing customer data.
SatoshiLabs said scammers could use the leaked information to send fake emails, place fraudulent phone calls, mail deceptive letters, or impersonate banks, crypto exchanges, or even Trezor. The company said it is continuing to investigate the incident.
Part of a wider string of hardware wallet security incidents
Trezor is one of the more widely used Bitcoin hardware wallet products and also supports storage for other cryptocurrencies. The report noted that Bitcoin users’ personal data has been targeted before.
In 2020, an unauthorized party accessed hardware wallet maker Ledger’s e-commerce and marketing database, leaking more than 1 million email addresses and the personal contact data of nearly 10,000 customers.
At the start of this year, customers also reported receiving emails from Global-e, Ledger’s payment partner, saying that a breach in its cloud systems had leaked sensitive customer data.
The report also referenced a separate case involving Coinkite’s Coldcard products. Hackers began draining $111 million in Bitcoin from the popular Coldcard hardware wallets at the end of last month. As investigations continue, the amount stolen could be higher, with some estimates putting the real figure above $130 million.
According to the report, the theft was still ongoing, with Bitcoin users and Coinkite urging customers to move their funds as hackers continued to drain digital assets from later devices.
The story first appeared in Bitcoin Magazine and was written by Mathew Di Salvo.