Trezor has confirmed that one of its logistics partners, ShipMonk, suffered a data breach exposing customer order information.

The incident affected 13,689 customers, including:

- 11,742 with full exposure: names, emails, phone numbers and shipping addresses

- 1,947 with partial exposure: names, cities and emails

Customers in the US, UK, Sweden, Colombia, Brazil, Italy and Portugal who received orders between May 10 and August 8, 2026 may be affected.

Trezor says its own systems and devices were not compromised, but affected users could face more sophisticated phishing attempts. Affected customers have been notified directly by official email.