Trezor warns of data breach at shipping partner

Hardware wallet manufacturer Trezor reports that one of its shipping partners has fallen victim to a cyberattack. The company states that customers’ personal data have been exposed, but assures that the hardware wallets themselves remain safe.

In short:

• Over 13,000 customers in seven countries are affected by the data breach
• Names, addresses, phone numbers and email addresses have been exposed
• Trezor will soon introduce an anonymous delivery option

Which data were exposed

The breach concerns customers in the United States, Great Britain, Sweden, Colombia, Brazil, Italy and Portugal who received an order between May 9 and August 8, 2026. In total, 11,742 customers were fully exposed, including their full name, email address, phone number and shipping address. In addition, 1,947 customers were partially affected, with name, city and email address having been accessible.

Trezor states that the damage has been limited thanks to its strict policy of storing customer data for only 90 days. The company has also been able to enforce this policy with its shipping partners. All affected customers have been notified by email.

Precautionary measures against phishing

Although Trezor’s systems and devices themselves have not been compromised, the company warns users of possible phishing attempts. After all, cybercriminals may use the exposed data to make targeted contact with victims.

Trezor reiterates that users should never enter their backup key on a website and never share it with others. Updates should only be checked via official Trezor channels. The company will announce further information via its blog.

Anonymous delivery option coming soon

Trezor is currently working on an Anonymous Delivery option that enables safer online shopping. This system allows users to purchase a hardware wallet without revealing their home address or real identity.

The feature offers a separate checkout page where customers can use a nickname, choose an automatic parcel locker for pickup and receive discreetly packaged parcels. The carrier sends the pickup code only via email or SMS. In Europe, this option is expected to launch in September, in the United States at the end of the year.