Trezor warns 14,000 customers of data breach via fulfillment partner

Prague-based cryptocurrency hardware wallet manufacturer Trezor has notified approximately 14,000 customers that their shipping addresses were exposed in a data breach involving a third-party fulfillment partner.

The incident, disclosed on Wednesday, represents the first known case where customer shipping data linked to Trezor orders was compromised. The company stated that no other personal or financial information, including wallet addresses or transaction histories, was affected by the breach.

Trezor emphasized that the exposed data was limited to shipping addresses and did not include sensitive details such as passwords, seed phrases, or private keys. The company has not identified the specific fulfillment partner involved in the breach but confirmed that the incident originated from a third-party logistics provider handling order fulfillment for Trezor.

In a statement, Trezor said it has notified the affected customers and is working with the unidentified partner to investigate the breach. The company did not disclose whether law enforcement or regulatory authorities had been informed of the incident.

The breach comes amid growing scrutiny of third-party risk management in the cryptocurrency industry, particularly as hardware wallet providers increasingly rely on external logistics partners for order processing and delivery. Trezor did not provide details on whether additional security measures would be implemented to prevent similar incidents in the future.

The company’s response follows recent high-profile cybersecurity incidents in the crypto sector, where unauthorized access to customer data has raised concerns about the vulnerability of digital asset storage solutions.