A data breach at logistics provider ShipMonk exposed contact and order information for approximately 67,000 additional U.S. customers of Trezor, bringing the total to roughly 80,689 affected individuals. The compromised data included names, email addresses, phone numbers, shipping addresses and order numbers for orders from November 2019 through August 2021. This information could link an identifiable person and physical location to a hardware wallet purchase, creating phishing and physical targeting risks. The breach stemmed from a zero-day vulnerability in the Metabase analytics platform, despite ShipMonk’s repeated written assurances that the data had been deleted. Trezor’s wallet systems and devices remained secure, with no exposure of recovery seeds, private keys or funds.
Source: Read the original article
