A shipping provider breach at Trezor leaked names, emails, and addresses of 11,700 customers, raising phishing and security risks.
Trezor disclosed a data breach at its shipping provider affecting approximately 13,700 recent customers. Of those, 11,700 had personal details—including full names, email addresses, phone numbers, and shipping addresses—exposed. The company confirmed its systems and private keys remained secure, but the leaked data links users’ identities to their crypto holdings, increasing risks of phishing, social engineering, and physical security threats.
The incident underscores vulnerabilities in hardware wallet supply chains, contrasting with software self-custody wallets. While no financial assets were directly compromised, the exposure of physical addresses tied to crypto users heightens concerns over targeted attacks. Trezor has not disclosed further mitigation steps beyond acknowledging the breach.
Market reaction remains limited, as the breach does not involve direct asset theft or platform vulnerabilities. However, the event may prompt scrutiny of hardware wallet security practices among institutional and retail users.