Trezor Breach Widens: 67,000 More Customers Exposed

Michael Miller · 2026-09-07

If you own a Trezor hardware wallet, you might want to sit down for this one. The company just announced that a data breach from August is bigger than anyone thought — and it now affects tens of thousands more people. Let's break down what happened, who's affected, and what you should do next. ### What Exactly Happened? Back in August, Trezor's shipping and logistics partner, ShipMonk, suffered a data breach. At the time, Trezor reported that about 14,000 customers were impacted. But now, after further investigation, the company says an additional 67,000 U.S. customers have been caught up in the mess. That brings the total to 81,000 people. So what kind of data are we talking about? Names, email addresses, phone numbers, and physical addresses. No financial info, no seed phrases, no private keys. That's the good news. But still — it's your personal information out there, and that's never fun. ### Why Should You Care? You might be thinking, "It's just my email and address. What's the big deal?" Well, here's the thing: scammers love this kind of data. With your name, email, and address, they can craft convincing phishing emails or even show up at your door pretending to be from Trezor. Imagine getting an email that looks like it's from Trezor, asking you to "verify your wallet" or "confirm your recovery seed." If you're not careful, you might click a link and hand over access to your crypto. That's exactly what these crooks are hoping for. ### What Trezor Is Saying Trezor has been pretty transparent about the whole thing. They've apologized and said they're working closely with ShipMonk to figure out exactly what went wrong. They've also notified the affected customers directly via email. But here's the kicker: Trezor is a hardware wallet company. Their whole brand is built on security. So when something like this happens, it stings a little extra. It's a reminder that even the most secure devices can't protect you if the companies you trust drop the ball on basic data handling. ### What You Should Do Right Now If you're one of the 81,000 affected, don't panic. But do take these steps: - **Watch out for phishing attempts.** If you get an email claiming to be from Trezor, don't click any links. Go directly to Trezor's official website by typing the address yourself. - **Never share your seed phrase.** Not with anyone. Not even if they claim to be Trezor support. Trezor will never ask for it. - **Consider using a different email address** for crypto-related accounts. It adds a layer of separation from your everyday life. - **Enable two-factor authentication (2FA)** on all your accounts, especially email. It's not perfect, but it helps. - **Stay informed.** Follow Trezor's official blog or social media for updates. ### The Bigger Picture This isn't just a Trezor problem. It's a wake-up call for the entire crypto industry. As more people adopt hardware wallets, the companies behind them need to step up their game when it comes to protecting customer data. And for us as users? It's a reminder that security is a shared responsibility. We can't just buy a device and assume we're safe. We have to stay vigilant, question everything, and keep our guard up. At the end of the day, your crypto is only as safe as the weakest link in the chain. Sometimes that link is a shipping company you've never heard of. Stay safe out there.