Trezor confirmed that its internal systems, devices, private keys, and wallet backups were not compromised, as the breach occurred entirely on ShipMonk's logistics end

Trezor said on 4 September 2026 that shipping partner ShipMonk's August breach also exposed order data from a 2019 to 2021 partnership that ShipMonk had confirmed in writing was deleted, pushing the number of customers with names, phone numbers and home addresses exposed to about 80,700. Ledger faces a 500 million dollar class action over its own breaches and customer thefts.