Trezor Data Breach Expands to Include More U.S. Customers
- Trezor’s breach now affects approximately 80,000 people, including home addresses.
- The leak includes U.S. orders from November 2019 to August 2021, adding about 67,000 new customers to the incident.
- Private keys and wallet backups were not compromised in the breach.
- The breach originated from a SQL-injection vulnerability in Metabase used by Shipmonk.
- Trezor plans to introduce an Anonymous Delivery system in the U.S. by the end of 2026.
The recent discovery of additional affected customers highlights ongoing challenges with third-party data management for Trezor, despite their systems remaining uncompromised. The exposure of personal information raises concerns about potential physical risks and identity impersonation scams for affected users.
With around 80,000 individuals impacted, Trezor’s focus on enhancing privacy through its upcoming Anonymous Delivery system underscores its commitment to protecting customer data moving forward. (Source)
