ShipMonk Data Breach Exposes Personal Data of 67,000 Additional Trezor Customers
Brief
Trezor has disclosed that a data breach at its third-party shipping provider, ShipMonk, exposed personal information belonging to approximately 67,000 additional US customers, substantially expanding the scope of an incident first reported in August.
The newly identified records relate to orders processed during Trezor’s previous partnership with ShipMonk, from November 2019 to August 2021.
The affected data includes customers’ full names, email addresses, phone numbers, shipping addresses, and order numbers, creating heightened risks of targeted phishing , phone scams, fraudulent mail, and potential physical-security threats.
ShipMonk Data Breach
Trezor said ShipMonk informed it on September 2 that the breach included older order data that had previously been believed to have been deleted.