Trezor customer data exposed

[DubemIfedigbo001]

I think the best place to secure our coins now is the software non custodial wallets. Since the hardware wallets are prone to attack.

Every wallet is prone to attack, even the software wallets we sing their praises have been attacked several times in the past.
e.g, dating back to 2018, Electrum was plagued with phishing scam where hackers use dummy nodes to imitate electrum servers and if a user connected to their server tries to make a transaction, the scammers send false error messages directing those users to update their apps with an embedded phishing link.
Wallets are continuously under attack and that's why they rollout consistent security updates.

This discussion is not a case of wallets being attacked but that of data breach in the shipping service which delivers these wallets to clients after purchase, they're actually different concerns.

Throughout our entire relationship with ShipMonk, we repeatedly requested and received written assurance confirming the deletion of the data, in line with our contract, data policy, and past communications. We are very disappointed that, despite receiving this confirmation, the data was not deleted in their systems.

https://trezor.io/blog/news/recent-customer-data-exposed-in-shipping-provider-incident

This is so sad, isn't this enough for Trezor the take legal action against ShipMonk?

[rdluffy]

I just saw it on X (and it’s already been posted here)
Another day, another leak, or at least confirmation
It’s strange that it took so long to uncover a leak from 2019 to 2021

What always worries me:

“could potentially expose affected individuals to physical security risks.”

Even if it’s in the U.S., it’s still dangerous

Will there be some kind of lawsuit against Trezor?

[SFR10]

Seems like More people were affected by this data breach and dates back to orders from 2019 to 2021, affecting additional 67k US customers with full data exposure.

I think it's time for all HWs to ditch third parties ^{[it'll be a mess at first, but it's better than putting so many of their customers at risk]}!
^{- BTW, based on "this post on X", what ShipMonk did (or rather didn't) doesn't seem to count as a breach of contract, but I believe Trezor can still sue them for misrepresentation or something similar.}