According to The Block, Trezor has announced that a separate batch of 67,000 customers had their personal data exposed due to the ongoing cybersecurity incident involving logistics provider ShipMonk. This revelation expands the scope of the breach beyond previously reported figures.
The newly identified records are believed to date from between 2019 and 2021. While specific transaction volumes were not disclosed in this update, these compromised files include sensitive personal identifiers such as customer names, email addresses, phone numbers, full shipping addresses, and order reference numbers.
This development underscores the significant reach of ShipMonk’s security failure over multiple years. The exposure of physical mailing addresses combined with digital contact information poses potential risks for identity theft or phishing attacks against these specific individuals. Trezor has taken steps to alert affected users regarding this new batch of compromised data, ensuring that customers are aware their personal details may have been intercepted by malicious actors.
The incident highlights the challenges faced by e-commerce businesses in maintaining robust security protocols across complex supply chains. For consumers who utilize ShipMonk services during those years, it is now possible to update passwords and monitor accounts for suspicious activity related to this specific breach timeframe. While no financial loss was directly reported as a result of this data access, the compromise of such comprehensive personal dossiers remains a serious concern for both users and enterprise clients.
Trezor continues to investigate whether additional records from different time periods may be involved in similar incidents involving ShipMonk’s systems. The company urges all potentially affected parties to remain vigilant regarding their online security posture following these disclosures.
