Trezor hardware wallet shipping service system information has been leaked.

[KawasakiNinja1_]

This issue has been discussed in the global section, but our local board has not been highlighted yet, so I tried to highlight it, currently it appears that Trezor has reported that an authorized party has accessed and leaked the customer information collection system, resulting in the leakage of information of 13689 users, i.e. their names, cities and email addresses.

Code:

The data exposed:

- Full names
- Shipping addresses
- Phone numbers
- Email addresses 

https://x.com/i/status/2087885428313543059

Trezor Customer Data Exposed in Shipping Partner Breach https://www.yahoo.com/news/us/articles/trezor-customer-data-exposed-shipping-131043576.html

Everyone has seen before that a hardware wallet cold card of the Coinkite company was hacked, resulting in a large number of bitcoins being hacked from there, which has created a sensational situation in the Crypto community. To my knowledge, starting from July 30, 2026, hackers have stolen over 1800 bitcoins from more than 5 thousand wallets in several stages. However, since hardware wallets like cold cards were hacked, we should all be careful in the case of Trezor wallets, although it has not yet leaked enough information to be hacked.

[Doan9269]

It's high time that everyone who wants to buy a hardware wallet is more sensitive about how they engage with the process of getting one; probably, you should avoid giving your real details to avoid individual tracking. I know that ever since the incident of the Coldcard hack, there will be more other exposure of possible threats and loopholes to be discovered from other wallets and some service providers, as we may have it from what is being discussed here, honestly I don't expect this to be coming from Trezor, it could be the delivery agents or third party company that are taking advantage of this against them.

[Obim34]

~snip

Not Trezor alone, be careful with any kind of wallet you use, if possible perform further privacy settings.

Airgapped devices are also an option, I understand the complexity of trying to run the setup, It's actually worth the stress if you want to maintain the maximum level of wallet privacy and security.

Henceforth, I expect everybody creating a wallet to create one with a passphrase, It reduces the risks of funds being drained amid recent attacks.

[promise444c5]

They actually don’t possess any customer informations  that can get their customers Trezor wallet hacked..

The informations that got leaked can lead to phishing, scam, spam and can also  indirectly lead to tricking a customer to install a malware(that’s the only part related to hacking ). Don’t forget it’s not directly trezor, it’s third party service just like previous trezor related leaks.

The only thing that can compromise trezor wallet is if they also have some venerabilities quietly sitting in their source codes just like cold card incident.

[ZeroVinsonN]

The leaked information will make it easier for suspicious entities to contact users but not necessarily give access to the wallet itself, it is still a thing of concern since not everyone wants their personal information out like that especially in their hands of someone with malicious intents, scammers like these kinds of things, they can very much try to reach out with maybe even pretending to be trying to help, people should just watch out for suspicious attempts to contact them.

[Exitoral]

Woohoo. This is serious. Well, it doesn't mean that with what they collected the private keys of Trezor is compromised. But with the information being stolen, an hacker could potentially create a convincing phishing email that can in return make them steal funds from the users. The information gotten is a lot. Me here thinking of ways an hacker can use such information. Wow. The users should be careful. I will list some of the ways an hacker can use to steal your coin.

1. Convincing phishing email: An email saying a compromised attack have been made to your information, bla bla and ask you to click to prevent further issue. All check whether the email is from the right source. It's usually at the top of your screen in the email.


2. They can trick you into revealing your seed phrase. You can be convinced as a reason of the data they gave stolen.


3. Since they also have shipping address, there is a likely hood of physical attack. Now they know which amount belongs to who. So that can happen.


4. Hhm. Ok. Pretending to bring a package for you. And ask you to make payment.


5. They can impersonate you if they have other info of the user from another place. Both combined together is gold mine.


6. Be careful of fake links. Very easy since they have your email address already.



This are the once I can come up with. Others can help. Let's be careful. Tried to make it as simple as it can be.

There's one last one. They can pretend they are from Trezor team. Take note of that. And let's all of us be safe.

[EjiukaSpecial]

In as much as we're concerned about the service system information that's been leaked, it's also important to note that a customer data breach is different from when a wallet is compromised. From the information that's already been exposed, they can only know about the address and phone numbers of the recipients of the ordered Trevor wallets, it doesn't reveal the private keys to any attacker.

The main concerning issue about the incident is that scammers can use this personal information of the supposed recipients to make their scam moves more believable. A scammer who already knows you ordered a hardware wallet can easily pretend to be support or a delivery company as a means of making you believe that they're originally from Trevor customer support. This is why it's important to always be security conscious and not share your seed phrase with anyone regardless how they try to convince you.