Panic at One of the Most Used Cryptocurrency Wallets: Some Users May Be at Risk

Hardware wallet manufacturer Trezor announced that thousands of customers’ order information was exposed due to a data breach at a third-party logistics provider. The company added that its own systems and hardware wallets were not affected by the incident, while warning users about potential phishing attacks.

Which Users Were Affected by the Trezor Data Breach?

According to Trezor’s statement, the incident affected a portion of new customers who received orders in the 90-day period prior to August 8, 2026.

Countries where customers were affected by the data breach include the US, the UK, Sweden, Colombia, Brazil, Italy, and Portugal.

According to information shared by the company, the data of 11,742 customers was completely exposed, while the data of 1,947 customers was partially exposed. Thus, the number of customers affected to varying degrees by the incident exceeded 13,000.

The leaked information includes customers’ first and last names, delivery addresses, phone numbers, and email addresses.

Trezor: “Wallets and Company Systems Secure”

Trezor said the data breach occurred not directly in the company’s infrastructure, but in a third-party service provider used for order deliveries.

The company also stated that the incident was limited thanks to its 90-day data retention policy. It was also mentioned that all affected customers were individually notified via email.

Trezor stated that hardware wallets, company systems, and private information providing users with access to their crypto assets were not included in the breach.

However, obtaining information such as name, phone number, email address, and physical address can allow attackers to conduct more convincing, targeted phishing campaigns.

Trezor has therefore urged its users to be more vigilant in the coming period against suspicious messages that appear to be sent on behalf of the company or other cryptocurrency services.

The company specifically reminded users not to enter their wallet backups or recovery keywords on any website and not to share this information with anyone.