Trezor Confirms Shipping Partner Data Breach Affecting 14,000 Customers Across Seven Countries
Trezor hardware wallet maker disclosed that a shipping provider breach exposed personal information of approximately 14,000 customers. The company assured users that its devices and systems remain secure, but warned of phishing risks.
Major Data Breach at Trezor Shipping Partner Exposes Customer Information
Trezor, a prominent hardware wallet manufacturer, revealed Thursday that a data breach at one of its shipping providers has compromised personal information belonging to nearly 14,000 customers across seven countries. The incident represents a significant security exposure affecting recent purchasers in the United States, United Kingdom, Sweden, Colombia, Brazil, Italy, and Portugal who received orders within a 90-day window preceding August 8.
According to Trezor, the breach affected 11,742 customers whose data was fully exposed, including complete names, shipping addresses, phone numbers, and email addresses. An additional 1,947 customers experienced partial exposure limited to names and email information. The company emphasized that the compromise was isolated to its third-party fulfillment partner’s infrastructure and did not involve Trezor’s own systems or hardware wallet devices.
Trezor Assures Users of Device Security While Warning Against Social Engineering
Despite the third-party exposure, Trezor confirmed that its devices and core infrastructure remain completely secure and uncompromised. However, the disclosed personal and shipping information poses a distinct risk: attackers now possess verified contact details they can weaponize for targeted phishing and social engineering campaigns designed to trick customers into revealing sensitive wallet information.
In response, Trezor issued urgent security guidance to all affected customers. The company explicitly warned users never to enter their wallet backup phrases on any website or share them with anyone, and to exclusively use official Trezor channels when downloading software or receiving security updates. This advisory is particularly critical given that bad actors can now impersonate Trezor through fraudulent communications using genuine customer contact information.
Trezor stated it is conducting a thorough investigation into the incident and will publish further updates through its official blog. The company also announced plans to develop an Anonymous Delivery option in response to the breach, allowing customers to receive hardware wallets without exposing shipping data to third-party fulfillment providers.
Growing Pattern of Security Challenges in Hardware Wallet Sector
The Trezor breach occurs amid an accelerating series of security incidents affecting major hardware wallet providers. Recent reports indicated that Coldcard wallets suffered a critical vulnerability that resulted in approximately 1,800 Bitcoin being drained from customer accounts due to flaws in recovery phrase security. Earlier in 2026, competitor Ledger disclosed that its e-commerce partner Global-e had also experienced a separate data breach.
These recurring incidents highlight the expanding attack surface facing the hardware wallet industry, particularly as bad actors increasingly target customers through their personal information and known device ownership. The convergence of breaches across multiple manufacturers underscores why independent, defensive security practices remain essential for cryptocurrency holders.
Source: Trezor, via U.Today. Not financial advice.