Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers' Data It Said Was Deleted
Overview
Trezor, a manufacturer of hardware wallets, announced that a data breach at its shipping provider, ShipMonk, has compromised the personal information of approximately 67,000 U.S. customers. The leaked data includes names, email addresses, phone numbers, shipping addresses, and order numbers from transactions made between November 2019 and August 2021. Despite this breach, Trezor stated that the security of its hardware wallets remains intact, meaning users' funds are not at risk. This incident raises concerns about how third-party vendors can impact customer data security and highlights the importance of robust data protection practices in supply chains. Customers affected by this breach should remain vigilant for potential phishing attempts or other malicious activities using their exposed information.
Key Takeaways
- Affected Systems: Trezor hardware wallets, ShipMonk shipping services
- Action Required: Customers should monitor their accounts for suspicious activity and consider changing passwords and enabling two-factor authentication where possible.
- Timeline: Disclosed on October 20, 2023
Original Article Summary
Hardware wallet manufacturer Trezor on Friday disclosed that another 67,000 customers from the U.S. have been impacted in a breach at its shipping provider ShipMonk. The exposed information includes customer names, email addresses, phone numbers, shipping addresses, and order numbers between November 2019 and August 2021. The breach does not affect the security of the company's hardware wallets
Impact
Trezor hardware wallets, ShipMonk shipping services
Exploitation Status
No active exploitation has been reported at this time. However, organizations should still apply patches promptly as proof-of-concept code may exist.
Timeline
Disclosed on October 20, 2023
Remediation
Customers should monitor their accounts for suspicious activity and consider changing passwords and enabling two-factor authentication where possible.
Additional Information
This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.
Related Topics: This incident relates to Phishing, Data Breach.