Hardware wallet maker Trezor has disclosed a massive data breach at one of its shipping providers in a Thursday post.
The breach has exposed sensitive personal information belonging to nearly 14,000 customers across seven countries.
Trezor said the breach affected 11,742 customers whose data was fully exposed. This data includes full names, shipping addresses, phone numbers, and email addresses. Another 1,947 customers experienced partial exposure with only names and email addresses.
New Trezor customers in the US, UK, Sweden, Colombia, Brazil, Italy, and Portugal have been affected by the incident. They received an order during the 90 days before Aug. 8.
Trezor said its own systems and hardware wallets were not compromised. The breach has been attributed to one of its shipping providers. The hardware wallet giant added that it had negotiated the same data-retention terms with its fulfillment partners.
Trezor warned that exposed contact and shipping information could be used to target customers with phishing and other social-engineering attacks.
“NEVER enter your wallet backup on a website or share it with anyone,” Trezor warned, urging customers to rely only on official Trezor channels for software and security updates.
Trezor said it is investigating the incident and will publish further updates on its blog.
The company also announced that it is developing an Anonymous Delivery option in response to the breach.
U.Today Editorial Team
Dan Burgin
