Hardware wallet manufacturer Trezor has announced a data breach exposing customer data.
Writing on X Thursday, the company said that 13,689 customers from the US, UK, Sweden, Colombia, Brazil, Italy, and Portugal who received an order 90 days prior to August 8 were affected.
“Our systems and devices remain secure, but affected customers could experience an increase in phishing attempts,” the Prague, Czech Republic-based company said. “We are deeply sorry to the community and those affected.”
Trezor said that 11,742 customers had their names, emails, phone numbers, and shipping addresses leaked. Another 1,947 customers had just their names, cities and emails exposed.
SatoshiLabs, the parent company of Trezor, said in an email to Bitcoin Magazine that its third-party fulfillment partner, ShipMonk, had experienced “unauthorized access to their systems containing customer data.”
“Scammers can use the leaked information to send fake emails, make fake phone calls, send fraudulent letters, or potentially impersonate banks, crypto exchanges, or even Trezor,” the company said.
SatoshiLabs said it was continuing to investigate the incident.
Trezor is one of the most popular Bitcoin hardware wallet solutions, and also has support for storing other cryptocurrencies.
Bitcoiners’ personal data has been targeted by cybercriminals in the past: back in 2020, an unauthorized party accessed popular hardware manufacturer Ledger’s e-commerce and marketing database, leaking over 1 million email addresses and the personal contact data of nearly 10,000 customers.
And at the start of this year, customers reported receiving emails from Global-e, Ledger’s payment partner, that a data breach at its cloud systems leaked sensitive customer data.
The Bitcoin community is still reeling after hackers targeted Canadian company Coinkite’s popular Coldcard product.
Hackers started draining $111 million in Bitcoin from the popular Coldcard hardware wallets at the end of last month.The amount stolen could be much higher as investigations continue, with some estimating the real figure to be over $130 million.
The theft continued, with Bitcoiners — and Coinkite — asking users to move their funds as hackers continued to drain digital coins from the later devices.