Trezor Data Breach Affects Additional Customers
- An additional 67,000 Trezor customers in the U.S. were affected by a breach at shipping provider ShipMonk.
- The breach exposed names, email addresses, phone numbers, home addresses, and order numbers for orders placed from November 2019 to August 2021.
- Trezor’s systems remain secure, with no compromise to devices or hardware wallets.
- The breach was linked to a critical SQL injection flaw in the Metabase analytics tool.
The recent data breach affecting Trezor customers highlights ongoing vulnerabilities in third-party services like ShipMonk. Despite assurances that data had been deleted, records were compromised due to a flaw in Metabase’s analytics tool.
This incident has expanded the total number of affected Trezor customers from an initial count of nearly 13,689 to approximately 80,700. The company is working on anonymous delivery options to mitigate future risks. (Source)
