ShinyHunters breaches ShipMonk: 14,000 Trezor customers' data exposed. This article was written by a language model from the source above and was not reviewed by a human before publication. Verify anything operational against the original. Editorial policy Key points * " 14,000 Trezor customers had personal data exposed via a third-party shipping provider, leading to elevated phishing risk. * " ShipMonk's systems, specifically Metabase, were compromised via a SQL injection vulnerability exploited by ShinyHunters. * " Affected customers must be vigilant against phishing attempts; organizations should review third-party data sharing practices. Overview of the ShipMonk data breach. The personal information of approximately 14,000 Trezor hardware wallet customers has been compromised following a data breach at ShipMonk, Trezor's third-party shipping provider. The incident, which Trezor states did not affect its own systems or device security, involved an unauthorized actor accessing customer data shared for order fulfillment purposes. The breach impacts customers in several countries, including the US, UK, Sweden, Colombia, Brazil, Italy, and Portugal, who placed orders between May 10 and August 8. The primary concern arising from this exposure is the potential for highly sophisticated phishing attempts targeting affected individuals, leveraging the stolen personal details. This event underscores the critical importance of third-party risk management and the cascading effects of supply chain vulnerabilities, even when core systems remain secure, according to SecurityWeek. Discover more Security Products & Services Dictionaries & Encyclopedias Technical details and attribution. The breach at ShipMonk, a fulfillment and logistics provider, reportedly stemmed from the exploitation of a SQL injection vulnerability in Metabase, a data analytics solution. While the specific CVE ID for this vulnerability was not disclosed in the source, it is described as a zero-day flaw that Metabase recently patched. The notorious extortion group ShinyHunters has claimed responsibility for an attack on Metabase and subsequently leaked data, which aligns with the timing and nature of this incident. The compromised data includes: * For 11,742 customers: Full names, phone numbers, email addresses, and shipping addresses. * For 1,947 customers: Names, cities, and email addresses. Trezor clarified that its strict 90-day data storage policy for shipping information, which it negotiated with fulfillment partners like ShipMonk, helped limit the overall scope of the breach. However, for the subset of customers with partial data exposure, older orders might also have been accessed. ShipMonk has not yet publicly acknowledged the incident, and it remains unclear how many other companies or individuals might have been affected by the Metabase compromise. Impact of ShinyHunters data breach. The primary impact of the ShinyHunters data breach on Trezor customers is a significantly elevated risk of targeted phishing, spear-phishing, and social engineering attacks. With access to full names, shipping addresses, email addresses, and phone numbers, malicious actors can craft highly convincing communications that appear legitimate. These attacks could aim to: * Trick users into divulging cryptocurrency wallet seed phrases or private keys. * Lure individuals into installing malware on their devices. * Coerce victims into performing unauthorized transactions. * Gain further personal information for identity theft. This incident highlights the pervasive risk associated with third-party vendors who handle sensitive customer data. Even when an organization like Trezor maintains stringent security for its core products and services, the security posture of its partners directly impacts customer trust and safety. Understanding the ShinyHunters data breach impact means recognizing the long-term threat of identity exploitation and financial fraud that can follow such disclosures. Actionable recommendations and mitigations. For affected Trezor customers: detecting sophisticated phishing attempts. Trezor has already notified affected customers and advised extreme caution. Individuals who placed orders with Trezor between May 10 and August 8 should be hyper-vigilant for any suspicious communications. * Email Verification: Carefully examine sender addresses, grammar, and spelling in emails. Be suspicious of unsolicited emails asking for personal information, especially anything related to your crypto wallet. * Link Scrutiny: Do not click on links in suspicious emails or messages. Instead, navigate directly to official websites by typing the URL. * Phone Call Awareness: Be wary of phone calls from individuals claiming to be from Trezor, ShipMonk, or financial institutions asking for personal or financial details. * Two-Factor Authentication (2FA): Ensure 2FA is enabled on all online accounts, particularly email, banking, and cryptocurrency exchanges, to add an extra layer of security. * Password Hygiene: Use unique, strong passwords for all accounts and consider a password manager. For organizations: mitigating third-party supply chain risks. This incident serves as a stark reminder for all organizations about the vulnerabilities inherent in the supply chain. Proactive measures are essential to how to protect against supply chain data breaches. * Vendor Security Assessments: Conduct thorough security audits and assessments of all third-party vendors who handle sensitive customer or corporate data. This includes reviewing their security policies, incident response plans, and data protection measures. * Data Minimization: Implement a policy of sharing only the absolute minimum data necessary with third parties. Trezor's 90-day data retention policy for shipping information is an example of a good practice for limiting exposure. * Contractual Obligations: Ensure vendor contracts include explicit clauses regarding data security, breach notification, and liability. * Continuous Monitoring: Establish mechanisms for continuous monitoring of third-party security postures and potential vulnerabilities in their systems. * Incident Response Planning: Develop and regularly test incident response plans that account for data breaches originating from third parties, ensuring clear communication channels and responsibilities. Addressing Metabase SQL injection vulnerabilities. While the specific vulnerability exploited in this case remains unnamed, the mention of a Metabase SQL injection vulnerability highlights a common attack vector. Organizations using Metabase or similar data analytics tools should ensure all software is kept up-to-date with the latest security patches. Regularly performing security audits, including penetration testing and code reviews, specifically for SQL injection flaws, is crucial. Employing Web Application Firewalls (WAFs) and parameterized queries can also help prevent such exploitation. Security teams should monitor logs for unusual database activity that could indicate attempted or successful SQL injection attacks.

Trezor data breach exposes 13,689 users, crypto wallets remain safe from attack. August 14, 2026 Key Takeaways: * Through a leak in the software of its shipping partner ShipMonk, Trezor disclosed private information related to approximately 13,689 users. * Names, home and work address, and phone numbers and e-mail addresses are exposed, increasing the risk of targeted phishing. * There has been no compromise of Trezor's systems or hardware wallets and wallet backups were not compromised. User Score Trezor has warned customers about a data breach at ShipMonk, a third-party logistics provider responsible for fulfilling some Trezor orders. While no crypto wallets or Trezor systems were breached, the leaked personal information could give scammers more convincing ways to target crypto holders. Table of contents. ShipMonk breach exposes customer information. On August 10, ShipMonk informed Trezor of a third party accessing systems that contained customer orders. Trezor stated that it is continuing to investigate. The company estimates that 11,742 customers had their names, email addresses, phone numbers and shipping addresses exposed. Another 1,947 customers may have had their names, city information and email addresses accessed. The affected orders initially covered customers in the United States, United Kingdom, Sweden, Colombia, Brazil, Italy and Portugal who received orders during the relevant period. Trezor claims it has a 90-day data retention policy which would mean that ShipMonk could only have historical data for 90 days. The company has since warned that the 1,947 partially exposed records could contain some that are older orders but is still confirming that detail with the logistics provider. Any customer who got an official e-mail notification from [email protected] should feel the information was leaked. Trezor stated that those who missed that email are unaffected. Crypto wallets and private keys were not compromised. The breach did not affect Trezor's internal systems, devices or wallet security. The main risk is targeted phishing. Even if the information is stolen, it may still be useful to criminals if it contains information that could help to make a scam appear real. A victim's true name, phone number or delivery address could be used to impersonate services such as Trezor, a cryptocurrency exchange; bank or other trusted service. They can send emails, make phone calls and even use physical mail to try to force users to disclose these sensitive details. Trezor's warning comes as it advises customers who are potentially impacted to take special care of messages that urge them to act quickly or disclose personal information. Above all, users must never enter their wallet backup or recovery seed into a website. According to Trezor, their customers will not have to reveal their wallet backup in order to access the legitimate support. Trezor pushes privacy options for future orders. The incident also led to Trezor emphasizing the various measures customers can take to minimize the tracking of personal information going into hardware wallet purchases. The company suggests to use an e-mail address not associated with a real name, if cryptography payments are possible, and if possible, a P.O. Box. Furthermore, Trezor is working on an Anonymous Delivery feature to mitigate exposure to shipping details, including locker picking up, neutral packaging, generic sender information and auto deletion of shipping identifiers upon delivery. Liam Turner DeFi Analyst & Writer Liam focuses on decentralized finance (DeFi), with a strong background in financial markets and technology. He started as a crypto trader, gaining firsthand experience in navigating volatile markets. His articles demystify DeFi protocols and provide readers with actionable investment insights. Liam's clear explanations have made him a trusted voice in the community.

Crypto hardware wallet Trezor discloses data breach affecting nearly 14,000 customers. Highlights * Trezor disclosed unauthorized access to customers data through one of its shipping provider. * The data breach includes personal information affecting 13.689 customers. * The hardware wallet maker assured that its systems and devices remain secure. Crypto hardware wallet maker Trezor has announced a data breach involving customers' personal information. The firm assured that its devices remain safe but warned that affected customers could experience an increase in phishing attempts. Trezor discloses customer data breach. In a blog post, the crypto hardware wallet maker announced that one of its shipping providers, ShipMonk, suffered a data breach that granted unauthorized access to systems containing customer data. "We're extremely sorry to inform our community that customer personal information, including full names, phone numbers, email addresses, and shipping addresses, has been accessed by an unauthorized actor during this breach," Trezor said. The wallet maker further disclosed that the data breach affects 11,742 customers with full exposure, including customers' names, email, phone number, and shipping address. Meanwhile, 1,947 customers had partial exposure, with the breach limited to their name, city, and email. Trezor also announced that the affected customers received their orders in the U.S., U.K., Sweden, Colombia, Brazil, Italy, or Portugal within the 90 days before 8 August 2026. "Affected customers were emailed today from [email protected]. No email means not affected," the firm said. The top crypto wallet provider also assured customers that there is no compromise in their systems and that its devices remain secure. However, it warned that affected customers could see an increase in phishing attempts, with scammers actively trying to use the leaked information to access customers' wallets. Move to curb A repeat of such incident. Trezor also disclosed that they are currently working on an Anonymous Delivery option, a move which could help avoid a repeat of such a shipping data breach. The firm aims to have this ready by September for the E.U. and by the end of the year for the U.S. "This gives you a safer way to order hardware wallets without linking the purchase to your home address or real-world identity," the wallet maker said. The option will enable users to use a nickname or label ID for their orders and select an automated parcel locker for pickup. They could also select unbranded packaging with a generic sender label. Trezor assured that the project is a top priority at the moment. It is worth noting that the incident follows the Coldcard hack, which again raised questions about crypto wallet security and the safety of self-custody. Galaxy Research estimates that users lost up to $116 million in Bitcoin from the Coldcard incident. Investment disclaimer: The content reflects the author's personal views and current market conditions. Please conduct your own research before investing in cryptocurrencies, as neither the author nor the publication is responsible for any financial losses. Ad Disclosure: This site may feature sponsored content and affiliate links. All advertisements are clearly labeled, and ad partners have no influence over its editorial content. BestChange Instant Currency Exchange at BestChange with Ease * Compare Rates Across 1000+ Exchanges * Access 250+ Cryptocurrencies & Pairs * Save Time with Real-Time Price Tracking * Trusted & Verified Exchange Listings Why Trust CoinGape * Latest * / * Trending