ChainCatcher report: Hardware wallet provider Trezor has updated its progress on the data breach involving its logistics partner ShipMonk, stating that the initial disclosed scale of the breach was underestimated. An additional approximately 67,000 U.S. customers who placed orders between November 2019 and August 2021 had their full information exposed, including names, email addresses, phone numbers, shipping addresses, and order numbers. Trezor stated that it had repeatedly confirmed with ShipMonk that the data had been deleted in accordance with the contract and data policies and had received written assurances, but the data was not actually deleted from ShipMonk’s systems. Trezor emphasized that its own systems were not compromised and that hardware wallets remain secure; however, affected users may face an increased risk of targeted phishing attacks. All affected users have been individually notified via email. The breach was first disclosed on August 13, at which time approximately 13,700 users were impacted. Trezor is accelerating the rollout of anonymous shipping services to reduce the risk of user information exposure during order placement.
Trezor Logistics Partner ShipMonk Data Breach Affects 67,000 Additional U.S. Users
ChaincatcherShare
Summary
Trezor confirmed a security breach at its logistics partner ShipMonk, exposing the personal data of 67,000 U.S. users. The leaked information includes names, email addresses, phone numbers, shipping addresses, and order numbers. The breach occurred despite assurances that data would be deleted. Trezor’s systems remain unaffected, and hardware wallets are secure. Users are at increased risk of phishing attacks. The company is implementing anonymous shipping to minimize exposure. This incident follows recent concerns over inflation data, underscoring the need for stronger data controls in the crypto sector. Affected users have been notified.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.