Trezor Data Breach Impacts 81,000 Customers

Cryptocurrency hardware wallet manufacturer Trezor has announced that a data breach occurring in August at its shipping and logistics partner, ShipMonk, now impacts an additional 67,000 customers in the United States. This brings the total number of affected Trezor customers to 81,000. The breach initially came to light when ShipMonk, which handles order fulfillment and shipping for Trezor, experienced a security incident. Trezor first disclosed the breach on November 15, 2023, stating that approximately 14,000 customers were affected. The expanded notification indicates that the scope of the incident is larger than initially determined. ShipMonk is a third-party logistics provider that manages inventory, warehousing, and shipping for various e-commerce businesses, including Trezor. The compromised data is understood to include customer names, addresses, and in some cases, email addresses. Trezor has emphasized that sensitive financial information, such as credit card numbers or cryptocurrency holdings, was not exposed as a result of this breach, as ShipMonk does not have access to such data. The company is advising all affected customers to remain vigilant against potential phishing attempts or other forms of social engineering. Trezor recommends that customers monitor their email accounts for suspicious communications and be cautious of any unsolicited requests for personal information. The hardware wallet provider has also stated that it is working closely with ShipMonk to understand the full extent of the breach and to implement enhanced security measures. This incident highlights the cybersecurity risks associated with third-party vendors in the supply chain. Companies that rely on external partners for critical operations like shipping and logistics must ensure these partners adhere to robust security protocols to protect customer data. The expanded notification from Trezor underscores the dynamic nature of data breach investigations, where the full impact can take time to ascertain. Trezor's commitment to transparency involves informing its user base about the evolving situation and providing guidance on protective actions. The company's primary focus remains on safeguarding its customers' digital assets and personal information, even when the breach originates from a service provider. The total number of affected individuals, 81,000, represents a significant portion of Trezor's customer base, necessitating a thorough review of their security practices and those of their partners.