Data belonging to 14,000 Trezor cryptocurrency wallet owners was stolen

Trezor, a manufacturer of hardware crypto wallets, has disclosed a large-scale leak of customers' personal data caused by a breach at ShipMonk—one of its partners for order fulfillment and shipping. A total of 13,689 people were affected.

ShipMonk notified Trezor on Monday of unauthorized access to systems where customer data was stored. For 11,742 customers, the attackers obtained a full set of data: names, phone numbers, email addresses, and home addresses. Another 1,947 individuals had their anonymity compromised only with regard to their names, cities, and email addresses. All of them placed orders between May 10 and August 8 and received them in the U.S., the U.K., Sweden, Colombia, Brazil, Italy, or Portugal.

Trezor assured users that the company’s own systems were not compromised, and that no devices, private keys, or wallet backups were affected. The company attributes the relatively small scale of the leak to its internal policy: partners are required to delete or anonymize order data 90 days after delivery, so older records were simply not retained. Customers who did not receive an email notification were not affected. The company also noted that this is the first time in 13 years that customers' phone numbers and shipping addresses have been exposed in a data breach.

The main risks following such leaks are phishing and so-called «wrench attacks"—that is, physical attacks on cryptocurrency owners. The 2020 Ledger incident demonstrated just how serious the consequences can be: after the data was published—affecting approximately 272,000 customers—some of them began receiving letters containing threats of physical violence and ransom demands. Some reported receiving several such messages per day.

The situation regarding physical attacks on cryptocurrency owners is worsening. According to CertiK, 52 physical attacks on cryptocurrency owners were recorded worldwide in the first half of 2026—compared to 39 during the same period a year earlier. Home break-ins have taken the top spot, surpassing kidnappings. Chainalysis estimates that during this same period, attackers stole over $ 30 million, and this year could set a record for losses.

In response to the incident, Trezor announced the launch of its Anonymous Delivery option, which includes pickup at postal lockers, neutral packaging, anonymized sender information, and automatic deletion of delivery identifiers. The service is scheduled to launch for customers in the European Union by September and in the U.S. by the end of the year.