Trezor Customer Data Exposed in Shipping Partner Breach

Trezor disclosed that customer order and shipping records were exposed after a recent security breach at a third-party logistics partner. The company has begun notifying customers whose information may have been accessed.

Trezor learned of the incident after the shipping partner reported unauthorized access to systems that store customer data. An internal investigation has started and Trezor is cooperating with the logistics firm and law enforcement. Fulfillment through the affected partner has been paused while the review continues.

The exposed information relates to order and shipping records handled by the partner. Preliminary findings indicate no evidence that wallet recovery seeds or private keys were compromised, and device firmware and cryptographic systems were not affected.

Trezor is tightening controls on third-party access to customer information and providing guidance to affected users. Customers are being advised to monitor communications for phishing attempts and to verify any unexpected requests before responding. Affected users are receiving instructions on how to report suspicious messages.

Trezor, developed by SatoshiLabs, sells hardware wallets that keep private keys offline and relies on external logistics firms for global order processing and delivery. Breaches at logistics providers can expose names, email addresses, phone numbers and delivery addresses, which can be used in targeted social engineering campaigns.

The investigation is ongoing. Trezor plans to provide updates as new information becomes available and is reviewing vendor risk and data handling practices to limit the impact of future incidents.