You buy a hardware wallet to be completely secure and anonymous, only to find out that the courier has just handed your home address to hackers. The data breach from Trezor—or rather, their logistics partner ShipMonk—has now expanded sixfold, with nearly 81,000 people targeted. Your private keys are safe, but what good is that when hackers now have on a silver platter the names, phone numbers, and exact physical addresses of crypto holders from 2019 to 2021? The worst part? The data was supposed to be deleted after 90 days, for which Trezor had “written guarantees.” In crypto, we build trustless systems, yet we entrust our physical safety to corporations with leaky databases and false promises.