PRAGUE (Realist English). Hardware crypto wallet manufacturer Trezor confirmed on 13 August a data breach affecting nearly 14,000 customers. The incident resulted from a hack of the systems of logistics partner ShipMonk, which handles storage and delivery of the company’s devices.
According to Trezor, attackers gained access to orders placed between 10 May and 8 August 2026. A total of 13,689 buyers were affected. Of these, 11,742 had full data stolen: name, email address, phone number and shipping address. Another 1,947 clients had their name, city of residence and email compromised.
Who is at risk
The incident affected buyers from seven countries: the United States, the United Kingdom, Sweden, Colombia, Brazil, Italy and Portugal. The breach is limited to a relatively small number of clients thanks to Trezor’s policy requiring partners to delete or anonymise order data 90 days after delivery.
The company has already notified all affected customers via email from help@trezor.io. At the same time, Trezor warned that scammers may soon send fake emails impersonating the company.
The wallets themselves are not compromised
Trezor stressed that the hack did not affect the company’s own systems. No private keys, seed phrase backups or device firmware were compromised. The wallets themselves and the funds stored on them remain secure.
However, experts estimate that the leak represents one of the most dangerous scenarios for cryptocurrency holders: attackers now have a verified list of people who own hardware wallets, along with their real home addresses and phone numbers.
As the Financial Times notes, “criminals have recognised that crypto holders are high‑value targets because they possess wealth in an instantly and irrevocably transferable form.”
Second incident in two weeks
The Trezor breach comes amid growing concern over the security of “cold” wallets. On 30 July 2026, more than $100 million was stolen from owners of Coldcard hardware wallets due to an error in private key generation. TRM Labs analysts then noted that the incident “confirms that self‑custody transfers risk rather than eliminating it.”
According to Chainalysis, in the first half of 2026, there were 52 confirmed cases of “crypto‑wrench attacks” – physical assaults on digital asset holders. 33 of these occurred in France. Total losses from such attacks in the first half of 2026 exceeded $124 million.
Affected Trezor customers now face an increased risk of phishing attacks, extortion attempts and even physical assaults. In January 2026, a similar breach at wallet manufacturer Ledger led to years‑long phishing campaigns, extortion and physical threats against prominent crypto holders.
As the Financial Times notes, the Trezor incident is “the second case in two weeks where cold wallet users have run into problems.” The question is how quickly the industry can tighten security standards at the logistics partner level – or whether data leaks of crypto asset owners will become the new normal, turning the “safest storage method” into a source of increased vulnerability.
