Hardware wallet firm Trezor reports a third-party logistics breach affecting users in seven countries who ordered devices in the past 90 days.
Hardware wallet manufacturer Trezor disclosed a data breach at one of its shipping providers, exposing sensitive order details for 13,689 customers. The breach affects users in the US, UK, Sweden, Colombia, Brazil, Italy, and Portugal who received orders between May 10 and August 8, 2026.
The exposed data includes full names, shipping addresses, phone numbers, and email addresses. Trezor stated 11,742 customers experienced full exposure, while 1,947 had partial data compromised. The company attributed the limited scope to its 90-day data retention policy and confirmed all affected users were notified via email.
Trezor emphasized its systems and devices remain secure but warned users to expect increased phishing attempts. The company reiterated security guidance, advising customers never to enter wallet backups on websites or share them with third parties.