14,000 Trezor Customers Impacted by Data Breach at ShipMonk
ShipMonk, a shipping provider for Trezor, suffered a data breach impacting 14,000 customers.
Trezor, a hardware crypto wallet provider, reported that its third-party shipping partner, ShipMonk, experienced a data breach. The incident compromised the personal information of nearly 14,000 customers, including names, addresses, emails, and phone numbers. ShipMonk reportedly exploited a zero-day vulnerability in Metabase, and the extortion group ShinyHunters claimed responsibility for an attack on Metabase.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Trezor?
Get an email when a new story names Trezor, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonThe breach originated not within Trezor itself, but through its third-party logistics partner ShipMonk, which was exploited via an unpatched zero-day vulnerability in the Metabase analytics platform. This highlights a critical and often underestimated risk: an organization's security posture is only as strong as its weakest vendor link. ShinyHunters, a prolific extortion group, leveraged the Metabase flaw to access customer PII including names, addresses, emails, and phone numbers. Companies that share customer data with third-party service providers must rigorously assess and monitor those vendors' security practices, as failures upstream directly translate into downstream harm for end users.
What helps against this
How we list vendors- Data loss prevention (DLP)
Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.
- Security awareness training and phishing simulation
People recognise and report attacks instead of falling for them.
- Third-party risk management (TPRM)
You know which suppliers could hurt you, and you hear quickly when one of them is breached.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — AmnesiaStealer
- malware — ShinyHunters