Trezor Data Breach Exposes 80,700 US Records

| blocktempo.com
Trezor said a ShipMonk data breach exposed records linked to about 80,700 US customers, adding roughly 67,000 people to its earlier disclosure of 13,689 affected customers. The exposed data may include names, email addresses, phone numbers, delivery addresses and order numbers from orders placed between November 2019 and August 2021. Trezor said ShipMonk retained the records despite contractual deletion requests and written confirmation that the data had been removed. Trezor said its internal systems, hardware wallets, private keys, wallet backups, seed phrases and device data were not compromised. The Trezor data breach therefore presents a phishing, impersonation, extortion and physical-security risk rather than evidence of direct remote cryptocurrency theft. Customers should be alert to fake messages claiming to be from Trezor, banks or exchanges. The company is preparing anonymous shipping options, including neutral packaging and collection lockers. Availability is expected in the European Union in September 2026 and the United States by year-end. A separate Coldcard firmware vulnerability reportedly weakened seed entropy to about 40 bits, affecting more than 5,200 addresses and 1,816 BTC. For crypto traders, the Trezor data breach is mainly a security and reputational issue, with limited direct impact on cryptocurrency prices.
Neutral
The Trezor data breach does not indicate that Trezor wallets, private keys or seed phrases were compromised, so it creates no clear direct selling pressure on BTC or the wider crypto market. In the short term, affected users may move funds, replace devices or reduce activity because of phishing and physical-security concerns. However, these actions are unlikely to be large enough to materially affect market prices. The expanded number of exposed records could increase reputational pressure on Trezor and encourage traders to review wallet-security practices. The separate Coldcard vulnerability involving 1,816 BTC could reinforce concerns about hardware-wallet security, but it is not evidence of a broader Trezor compromise. Unless attackers demonstrate actual wallet theft or the incident triggers wider exchange or custody disruptions, the expected price impact remains limited. The appropriate market classification is neutral.