Image
var isDesktop = window.innerWidth > 1050;
var cardOrTerminal = isDesktop
? `TerminalEvery BTC signal – one screen›`
: `ExchangesView top BTC exchanges (USA)›`;
var toppickThirdHeader = `
Top Tools & Picks
Bitbo ProUnlock 70+ private charts›WalletsView top BTC hardware wallets›
${cardOrTerminal}
`;
var postContent = document.querySelector(‘.post__content’);
if (postContent) {
var h2s = postContent.querySelectorAll(‘h2’);
if (h2s.length > 0) {
// Insert the main Top Picks above first h2
h2s[0].insertAdjacentHTML(‘beforebegin’, toppicksHTML);
}
if (h2s.length > 2) {
// Insert the Credit Card Top Pick above third h2
h2s[2].insertAdjacentHTML(‘beforebegin’, toppickThirdHeader);
}
}
// Event tracking for both Top Picks sections
setTimeout(function() {
var picks = document.querySelectorAll(‘.top-picks .pick-row’);
picks.forEach(function(pick) {
pick.addEventListener(‘click’, function() {
var pickName = pick.getAttribute(‘data-pick’);
if (typeof window.plausible === ‘function’) {
window.plausible(‘Click Top Pick’, { property: pickName || ‘Top Pick’ });
}
});
});
}, 0);
});
Trezor says the data breach at its shipping partner ShipMonk is far bigger than first reported, with roughly 67,000 additional US customers now confirmed as exposed.
What the September update revealed
ShipMonk informed the hardware wallet maker on September 2, 2026 that the stolen material also included order data from an earlier stretch of cooperation between November 2019 and August 2021.
Those records were fully exposed, covering names, email addresses, phone numbers, shipping addresses and order numbers.
Trezor said it had repeatedly asked for and received written confirmation that the older data had been deleted, in line with its contract and data policy.
The company wrote in its updated disclosure:
“We are very disappointed that, despite receiving this confirmation, the data was not deleted in their systems.”
How the incident began
ShipMonk first told Trezor about unauthorized access to its systems on August 10, 2026.
The original disclosure counted 11,742 customers with full exposure and 1,947 with partial exposure limited to name, city and email, tied to orders placed between May 10 and August 8, 2026 in the US, UK, Sweden, Colombia, Brazil, Italy and Portugal.
Trezor’s 90-day retention rule, which requires fulfillment partners to delete or anonymize order data three months after delivery, was supposed to keep older orders out of reach.
Phishing risk for those affected
Trezor said none of its own systems were compromised and that devices remain secure, but warned that exposed customers may be targeted by more convincing scams.
The leaked details could be used for fraudulent emails, phone calls or letters, and the company noted the information could create physical security risks as well.
Everyone affected has been emailed directly, and anyone who did not hear from [email protected] was not caught in the leak.
Trezor said this is the first breach to expose customer phone numbers and shipping addresses since the company was founded in 2013.
