Trezor Breach Expands, 67,000 More Customers Affected
67,000 More Trezor Customers Exposed as Data Breach Widens
Trezor, the crypto hardware wallet maker, said personal information belonging to an additional 67,000 customers in the US was exposed in a data breach tied to one of its shipping providers.
The company disclosed the expanded scope in a post on X on Friday, updating an incident it first revealed in August. The newly identified affected customers made orders between November 2019 and August 2021.
According to the disclosure, the exposed data included full customer details such as names, email addresses, and phone numbers. The breach occurred at a third-party logistics or shipping partner rather than at Trezor itself, underscoring how customer data can be put at risk through vendors that support e-commerce and fulfillment.
The incident has drawn attention in the crypto industry because hardware wallets are designed to reduce the risk of online theft by keeping private keys offline. But even when funds remain secure, the exposure of personal data can create downstream risks for users, including targeted phishing attempts and other social engineering campaigns.
Trezor also said some of the exposed records dated back to 2019, years beyond the 90-day retention period that it said its partners had agreed to. That detail adds a fresh layer of scrutiny to how long customer information is stored across third-party systems and whether retention limits are being followed in practice.
The widening breach adds to a broader pattern of cybersecurity incidents affecting companies that handle customer records. In the US, confirmed data breaches are routinely tracked through sources such as state attorney general notifications, company disclosures, and cybersecurity reporting, reflecting the ongoing exposure risk for consumer data across industries—including crypto-related firms and their service providers.
