Trezor Data Breach Exposes Personal Information of Nearly 14,000 Customers

Cryptocurrency hardware wallet manufacturer Trezor announced on Thursday that a data breach at one of its logistics partners has exposed the personal information of nearly 14,000 customers. The Prague-based company stressed that its own systems and the security of its hardware devices were not compromised in the incident.

Details of the Breach

The security failure originated from a third-party vendor responsible for logistics. According to Trezor's disclosure, the breach affected customers who placed orders within the 90-day period leading up to August 8.

• A total of 11,742 customers had their full names, shipping addresses, email addresses, and phone numbers exposed.
• An additional 1,947 customers had partial personal information compromised.

Customers in several countries were impacted, including the United States, United Kingdom, Sweden, Colombia, Brazil, Italy, and Portugal. Trezor noted that data for earlier customers had been deleted as part of its data retention policy and was therefore not affected.

Trezor's Response and Potential Risks

Ad

Trezor has apologized to the affected users, acknowledging the gravity of the situation. "We understand the seriousness of this incident and the potential risks it may pose to our customers," the company said in an email statement. "We are deeply sorry for all affected users."

While the funds stored on Trezor devices remain secure, the company is warning customers to be vigilant against an increased threat of sophisticated phishing attacks. Malicious actors could use the leaked personal information to craft targeted scams designed to trick users into revealing their wallet recovery seeds or other sensitive credentials.

Broader Security Context

This incident highlights the operational risks associated with third-party vendors in the digital asset industry. The exposure of physical addresses and contact information also raises concerns about potential physical threats to cryptocurrency holders.

According to data from cybersecurity firm CertiK, there were approximately 52 documented physical attacks on crypto owners globally in the first half of 2026, a 33% increase from the same period in 2025. The Trezor breach follows a similar security incident previously reported by another hardware wallet maker, the Toronto-based Coinkite Inc.