Trezor disclosed on Thursday that a data breach at its third-party logistics provider, ShipMonk, exposed the personal information of nearly 14,000 hardware wallet customers, including shipping addresses for a subset of those affected.
The incident marks the first known data breach for the Czech hardware wallet maker, which was founded in 2013. According to a company statement reported by The Block, ShipMonk notified Trezor on Monday that an unauthorized party had accessed its order storage systems. The breach covered orders placed between May 10 and August 8, 2026.
Trezor said approximately 13,700 customers were impacted in total. Of those, 11,742 individuals had their full names, shipping addresses, phone numbers, and email addresses exposed. An additional 1,947 customers had partial data compromised, limited to names and email addresses. The company emphasized that no payment information, passwords, or recovery seeds were involved, as ShipMonk does not have access to that data.
The exposure of shipping details creates a tangible phishing risk. Attackers who possess a customer's name, address, and recent order history can craft highly convincing messages that appear to come from Trezor, a delivery carrier, or customs officials. Trezor warned users to treat any unsolicited communication referencing their order as suspicious, particularly if it asks for a recovery seed, a payment, or a login credential.