A total of 13,689 customer records from hardware wallet manufacturer Trezor fell into the hands of unauthorized parties on Thursday, August 13, 2026. This leak did not occur within Trezor’s internal systems, but rather originated from a hack on ShipMonk, their shipping partner. Of that total, 11,742 customers were fully affected, with their names, phone numbers, email addresses, and residential home addresses exposed.
Meanwhile, 1,947 other customers were partially affected, with only their names, cities, and email addresses leaked. All compromised data came from orders placed between May 10 and August 8, 2026, spanning various countries including the United States, the United Kingdom, Sweden, Colombia, Brazil, Italy, and Portugal. Older orders are confirmed to be safe thanks to Trezor’s policy of deleting or anonymizing shipping data 90 days after delivery.
Trezor emphasized that their systems remain intact. No devices, private keys, or wallet backups were accessed by the hackers. The company also stated that this is the first time in their 13-year history that a leak has exposed customers’ shipping addresses and phone numbers.
The Grim History of Ledger 2020
Knowing where digital asset owners live opens the door to dangers far more tangible than simple online scams. The address leak has triggered trauma among crypto users, recalling the 2020 data breach that exposed data of 272,000 Ledger customers. At the time, several victims received threats of physical violence and ransom demands from criminals who knew their locations.
Recent data confirms that this danger is on the rise. A CertiK report recorded 52 physical attacks on crypto holders worldwide during the first half of 2026, up from 39 cases during the same period a year earlier. Concerningly, home invasions have now officially surpassed kidnappings as the most frequently used physical attack method.
An analysis by Chainalysis completes this grim picture: the total value stolen from physical attacks has surpassed $30 million in the first half of 2026. This trend puts 2026 on track to potentially become the worst year for the physical security of crypto owners.
Vigilance is also being tested following a recent Coldcard wallet exploit that resulted in 233,000 BTC moving out of the hands of long-term holders. Some Trezor owners were reportedly among those affected, making warnings to stay alert to unexpected contact and to never enter wallet backups on any online platform increasingly urgent.
Breaking the Shipping Data Chain
Aware that storing customer addresses is like a ticking time bomb, Trezor is now accelerating the rollout of its Anonymous Delivery feature. This new service will include delivery to pickup lockers, the use of neutral packaging, and faster automatic shipping data deletion procedures. The feature is targeted for launch in Europe in September 2026, followed by a release in the U.S. market at the end of the year.
For now, keeping the front door locked is just as important as keeping private keys secure.
Reported by Decrypt.
Disclaimer: This article is for informational and educational purposes only, not financial advice. Cryptocurrency assets are highly volatile and carry significant risk. Always do your own research (DYOR) and never invest more than you can afford to lose.
