Trezor, a Prague-based hardware wallet manufacturer, revealed that a previous data breach was more extensive than initially reported. The company stated that an additional 67,000 U.S. customers had their personal information leaked, including names, emails, phone numbers, shipping addresses, and order numbers.
The leaked data pertains to orders placed between November 2019 and August 2021. This update follows an August announcement where Trezor had reported that data from 11,742 customers from the U.S., UK, Sweden, Colombia, Brazil, Italy, and Portugal had been exposed.
Another 1,947 customers had their names, cities, and emails exposed in the breach. Trezor attributed the leak to its third-party fulfillment partner, ShipMonk, which had provided false assurances that customer data had been deleted from its systems in accordance with contract and data policy.
SatoshiLabs, the parent company of Trezor, is currently investigating the incident. The company has directly emailed all affected customers. The breach occurred due to unauthorized access to ShipMonk's systems containing customer data.
