Hardware wallet maker Trezor confirmed that a previously disclosed data breach is larger than first revealed, exposing personal information of an additional 67,000 U.S. customers plus nearly 2,000 others worldwide. The compromised data, held by third-party shipping provider ShipMonk, includes names, emails, phone numbers, shipping addresses and order numbers from purchases made between November 2019 and August 2021, contrary to prior deletion assurances. Trezor says it repeatedly sought written confirmation that customer records were erased and now contends the information should never have been accessible. The company is notifying affected users and potential regulatory scrutiny appears likely.
This update represents a notable development in the Crypto sector. Organizations and founders tracking this space should evaluate potential strategic and technical implications on their operations.