Key Highlights

  • A data breach at a Trezor shipping provider exposed personal details of 11,742 buyers, with an additional 1,947 customers' partial information also affected.
  • The breach marks the second cold wallet security incident in two weeks, following a $100 million theft from Coldcard hardware wallet users on July 30.
  • Kidnappings accounted for more than half of 46 recorded violent attacks on crypto investors so far this year.
  • Trezor said it is developing an anonymous delivery option to reduce the risk of customers' addresses being linked to their crypto holdings.

Shipping Provider Breach Exposes Customer Data

Hardware wallet maker Trezor said Thursday that a data breach at one of its shipping providers exposed the names, addresses, phone numbers, and email addresses of 11,742 customers, while a further 1,947 customers had their names, cities, and email addresses exposed. The breach affected customers in the US, UK, Sweden, Colombia, Brazil, Italy, and Portugal who received devices between May 10 and August 8. The company said it was "deeply sorry" and warned affected customers could face increased Phishing attempts.

Second Cold Wallet Incident in Two Weeks

The breach marks the second security incident affecting cold storage wallet users in as many weeks, following a July 30 incident in which more than $100 million was stolen from holders of Coldcard hardware wallets after a bug caused private keys to be generated insecurely. Blockchain analytics firm TRM Labs said the Coldcard incident demonstrated that self-custody of crypto Assets "relocates risk rather than eliminating it." Cold wallets, which store private keys offline, have grown in popularity as hacks at online crypto exchanges have reached record levels.

Physical Attacks on Crypto Holders Continue to Rise

Crypto holders have increasingly become targets of physical attacks in addition to online threats, as criminals seek to steal digital assets that can be transferred instantly and irreversibly. Kidnappings accounted for more than half of 46 violent attacks on crypto investors recorded so far this year, according to blockchain data provider Chainalysis, with more than a third of attacks involving home invasions. Trezor said it is working on an anonymous delivery option that would allow customers to order hardware wallets without linking purchases to their home address or identity, targeting availability across the EU by September.