Third-party breach exposes shipping addresses of 14,000 Trezor buyers

ShipMonk, Trezor’s fulfillment partner, suffered unauthorized access to its systems, affecting nearly 14,000 customers’ data, the cold storage crypto wallet firm reported Thursday.

Trezor said the names, email addresses, phone numbers and shipping addresses of 11,742 customers had been compromised. It also said the names, cities and email addresses of another 1,947 customers were also breached, bringing the estimated number of victims to nearly 14,000 across the U.S., the UK, Sweden, Colombia, Brazil, Italy and Portugal.

“We have some difficult news to share,” Trezor said Thursday on X. “Unfortunately, one of our shipping providers has experienced a data breach that exposed sensitive order data.”

The Trezor-related security hack comes as global data breaches are at an all-time high, according to SentinelOne, a U.S. cybersecurity firm. It said that this year, data breaches have increased by 17% compared with 2025, with an average of 2,090 attacks worldwide each week. It is also estimated that global data breaches have been rising by 3% month over month since January.