Trezor hardware wallet shipping service system information has been leaked.

[KawasakiNinja1_]

This issue has been discussed in the global section, but our local board has not been highlighted yet, so I tried to highlight it, currently it appears that Trezor has reported that an authorized party has accessed and leaked the customer information collection system, resulting in the leakage of information of 13689 users, i.e. their names, cities and email addresses.

Code:

The data exposed:

- Full names
- Shipping addresses
- Phone numbers
- Email addresses 

https://x.com/i/status/2087885428313543059

Trezor Customer Data Exposed in Shipping Partner Breach https://www.yahoo.com/news/us/articles/trezor-customer-data-exposed-shipping-131043576.html

Everyone has seen before that a hardware wallet cold card of the Coinkite company was hacked, resulting in a large number of bitcoins being hacked from there, which has created a sensational situation in the Crypto community. To my knowledge, starting from July 30, 2026, hackers have stolen over 1800 bitcoins from more than 5 thousand wallets in several stages. However, since hardware wallets like cold cards were hacked, we should all be careful in the case of Trezor wallets, although it has not yet leaked enough information to be hacked.

[Doan9269]

It's high time that everyone who wants to buy a hardware wallet is more sensitive about how they engage with the process of getting one; probably, you should avoid giving your real details to avoid individual tracking. I know that ever since the incident of the Coldcard hack, there will be more other exposure of possible threats and loopholes to be discovered from other wallets and some service providers, as we may have it from what is being discussed here, honestly I don't expect this to be coming from Trezor, it could be the delivery agents or third party company that are taking advantage of this against them.

[Obim34]

~snip

Not Trezor alone, be careful with any kind of wallet you use, if possible perform further privacy settings.

Airgapped devices are also an option, I understand the complexity of trying to run the setup, It's actually worth the stress if you want to maintain the maximum level of wallet privacy and security.

Henceforth, I expect everybody creating a wallet to create one with a passphrase, It reduces the risks of funds being drained amid recent attacks.

[promise444c5]

They actually don’t possess any customer informations  that can get their customers Trezor wallet hacked..

The informations that got leaked can lead to phishing, scam, spam and can also  indirectly lead to tricking a customer to install a malware(that’s the only part related to hacking ). Don’t forget it’s not directly trezor, it’s third party service just like previous trezor related leaks.

The only thing that can compromise trezor wallet is if they also have some venerabilities quietly sitting in their source codes just like cold card incident.

[ZeroVinsonN]

The leaked information will make it easier for suspicious entities to contact users but not necessarily give access to the wallet itself, it is still a thing of concern since not everyone wants their personal information out like that especially in their hands of someone with malicious intents, scammers like these kinds of things, they can very much try to reach out with maybe even pretending to be trying to help, people should just watch out for suspicious attempts to contact them.

[Exitoral]

Woohoo. This is serious. Well, it doesn't mean that with what they collected the private keys of Trezor is compromised. But with the information being stolen, an hacker could potentially create a convincing phishing email that can in return make them steal funds from the users. The information gotten is a lot. Me here thinking of ways an hacker can use such information. Wow. The users should be careful. I will list some of the ways an hacker can use to steal your coin.

1. Convincing phishing email: An email saying a compromised attack have been made to your information, bla bla and ask you to click to prevent further issue. All check whether the email is from the right source. It's usually at the top of your screen in the email.


2. They can trick you into revealing your seed phrase. You can be convinced as a reason of the data they gave stolen.


3. Since they also have shipping address, there is a likely hood of physical attack. Now they know which amount belongs to who. So that can happen.


4. Hhm. Ok. Pretending to bring a package for you. And ask you to make payment.


5. They can impersonate you if they have other info of the user from another place. Both combined together is gold mine.


6. Be careful of fake links. Very easy since they have your email address already.



This are the once I can come up with. Others can help. Let's be careful. Tried to make it as simple as it can be.

There's one last one. They can pretend they are from Trezor team. Take note of that. And let's all of us be safe.

[EjiukaSpecial]

In as much as we're concerned about the service system information that's been leaked, it's also important to note that a customer data breach is different from when a wallet is compromised. From the information that's already been exposed, they can only know about the address and phone numbers of the recipients of the ordered Trevor wallets, it doesn't reveal the private keys to any attacker.

The main concerning issue about the incident is that scammers can use this personal information of the supposed recipients to make their scam moves more believable. A scammer who already knows you ordered a hardware wallet can easily pretend to be support or a delivery company as a means of making you believe that they're originally from Trevor customer support. This is why it's important to always be security conscious and not share your seed phrase with anyone regardless how they try to convince you.

[PremiumcryptoHub]

The leaked information will make it easier for suspicious entities to contact users but not necessarily give access to the wallet itself, it is still a thing of concern since not everyone wants their personal information out like that especially in their hands of someone with malicious intents, scammers like these kinds of things, they can very much try to reach out with maybe even pretending to be trying to help, people should just watch out for suspicious attempts to contact them.

Trezor hardware wallet user data has been leaked as we can see that another 67,000 Trezor users in the US have had their data leaked, in fact the names, email addresses, phone numbers, shipping addresses and order numbers of these US users have been leaked.

As the OP mentioned, the data of about 13,689 users was leaked in the previous month. However, you are right that the leaked data does not give access to the wallet but it is still a concern because no one wants their personal information to be leaked and in fact this number is gradually increasing. Note that the company mentioned that they requested Shipmonk to delete the data but the data has not been deleted from Shipmonk's system yet, so i think everyone should be aware of the fake emails and the risks.

67,000 more Americans using Trezor exposed to data breach https://finance.yahoo.com/markets/crypto/articles/67-000-more-americans-using-162219534.html

[obuoma]

This is very bad for a privacy company and shows that there is deliberate attempt to exploit Trezor users. Could this be the source of the personal information compromise that lead to those emails received by Trezor users? I say a post sometime ago about Trezor users receiving phishing emails, I don't know if anyone fell victim from that but it was a major source of concern to Trezor users as to where their email would have been exposed. This may just be the missing link we have been looking for.

[Cryptomultiplier]

If I were anyone among those who just ordered the hardware wallet from Trezor, I would try as much to not use it for the now until am sure the information leaked isn't at all sensitive enough to lead to a hack of my wallet and also, I don't advice anyone holding Bitcoin right now to use only one wallet for storage.
At least use multiple hardware wallets to secure your investment so Incase of a hack you don't get back to ground zero.

This just shows how security is a major concern when it comes to Bitcoin investment and even though most times it isn't the fault of the users who apply extra caution, it could be from the manufacturers of these hardware wallet or distributors themselves.

[Felicity_Tide]

information of 13689 users,

Code:

The data exposed:

- Full names
- Shipping addresses
- Phone numbers
- Email addresses 

although it has not yet leaked enough information to be hacked.

And who says the information above is not enough for scammers to do their thing?. This is exactly where phishing scams come in, and judging by the amount of leaked user information, it's going to be really bad. Out of the 13K hardware wallet owners, we are unarguably going to have a lot of victims.

The link below is a thread that's already giving me a glimpse of how these scammers are likely to operate with the available information above. All they have to do is to pose as Google customer service... try to convince their victim that their google accounts have been compromised... Give them a direct call to make it look real, and then direct them to a phishing link under the guise of helping them secure their account. They can also use other techniques.

Unlike some email scams that can sometimes be random, with the available information above, this one could be specifically targeted because the available leaked information is specifically linked to Trezor wallet users.... This is really bad.

Link to thread - https://bitcointalk.org/index.php?topic=5593184.0

[Asiska02]

As the OP mentioned, the data of about 13,689 users was leaked in the previous month. However, you are right that the leaked data does not give access to the wallet but it is still a concern because no one wants their personal information to be leaked and in fact this number is gradually increasing. Note that the company mentioned that they requested Shipmonk to delete the data but the data has not been deleted from Shipmonk's system yet, so i think everyone should be aware of the fake emails and the risks.

67,000 more Americans using Trezor exposed to data breach https://finance.yahoo.com/markets/crypto/articles/67-000-more-americans-using-162219534.html

With this leak that has happened, there is a high probability of wrench attack happening. Scammers don’t also fear coming in contact with their victims as long as they can get what they want. To have ordered for an hardware wallet, it means that you own some coins that you want to save there. This information leaked is already a red flag and you can be targeted via phishing attacks or wrench attacks.

Every information linked to customers are sensitive ones that are not supposed to be exposed especially that which has to do with wallets that is used to save bitcoin. There should be a way deliveries can be done discreetly without saving these users personal information aimlessly for a possible breach like this one in the future.

[MisFoxie]

The hackers who stole this data can sell it at a very high price because those data are very valuable. This kind of perfect data, which directly gives the details of a crypto user, if this data is in the hands of scammers, it becomes much easier for them to scam.

People only buy hardware wallets when they have a large amount of funds, and the fact that their data has been leaked means that each attempt by scammers will be one an another level. Those whose data has been leaked should change that email and phone number. As for the address and personal name, they may not be able to contact directly using some kind of scamming technique, but if they can find their social media accounts through their name and address, then another problem will begin.

[promise444c5]

People only buy hardware wallets when they have a large amount of funds, and the fact that their data has been leaked means that each attempt by scammers will be one an another level. Those whose data has been leaked should change that email and phone number.

Your statement  “ People only buy hardware wallets when they have a large amount”  is too absolute actually... Hardware wallet only give impression of someone having a large amount  of bitcoin but that does necessarily mean that everyone buying hardware wallet possess “large amount”.

Hence, those phone numbers and email can’t be used directly to take hijack possession, but they can help. Nevertheless, if they can afford [not financially] to replace those email and phone numbers , it’s better they should do that with immediate effect but if they can’t, they can take all precautions to prevent being scammed.

[PremiumcryptoHub]

As the OP mentioned, the data of about 13,689 users was leaked in the previous month. However, you are right that the leaked data does not give access to the wallet but it is still a concern because no one wants their personal information to be leaked and in fact this number is gradually increasing. Note that the company mentioned that they requested Shipmonk to delete the data but the data has not been deleted from Shipmonk's system yet, so i think everyone should be aware of the fake emails and the risks.

67,000 more Americans using Trezor exposed to data breach https://finance.yahoo.com/markets/crypto/articles/67-000-more-americans-using-162219534.html

With this leak that has happened, there is a high probability of wrench attack happening. Scammers don’t also fear coming in contact with their victims as long as they can get what they want. To have ordered for an hardware wallet, it means that you own some coins that you want to save there. This information leaked is already a red flag and you can be targeted via phishing attacks or wrench attacks.

Every information linked to customers are sensitive ones that are not supposed to be exposed especially that which has to do with wallets that is used to save bitcoin. There should be a way deliveries can be done discreetly without saving these users personal information aimlessly for a possible breach like this one in the future.

Yes, all the information related to the wallet used to store Bitcoin is sensitive and should not be disclosed, but I have noticed that about 80,000 plus usernames, email addresses, phone numbers, and shipping addresses have been leaked from the Trezor hardware wallet, it seems to us through which hackers may be able to hack into the Bitcoins held by Bitcoin holders.

The evidence of this is that the system of the third-party email service provider of the Trezor wallet has currently been compromised and they have stated that the email titled 'Critical Security Alert: STM32 Entropy Vulnerability' was not sent by them; it is basically a phishing or fraudulent attempt, so those of us who are using this wallet in this local board should not enter this fraudulent link.



https://x.com/Trezor/status/2097786518110609620