[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f1FXSTQ31DhX1VFFPjhSmfrYiephf_ExoPNxwCGVYSvk":3},{"article":4,"iocs":54,"watch_terms":55,"solutions":56,"lesson":146},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"961139ab-34e5-4120-938e-d20562452c3b","Trezor discloses data breach affecting nearly 14,000 customers","trezor-discloses-data-breach-affecting-nearly-14-000-customers-edfb56","Hardware wallet manufacturer Trezor disclosed a data breach affecting nearly 14,000 of its customers after ShipMonk, its shipping provider and logistics partner, got hacked. [...]","Hardware wallet manufacturer Trezor has disclosed a data breach impacting nearly 14,000 customers. The breach occurred because their shipping and logistics provider, ShipMonk, was compromised. Attackers gained access to customer order data, including names, shipping addresses, email addresses, and phone numbers. ShipMonk exploited a zero-day vulnerability in the analytics platform Metabase to access the data.","Trezor customer data exposed after logistics provider ShipMonk suffers data breach.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Ftrezor-discloses-data-breach-affecting-nearly-14-000-customers\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F08\u002F13\u002FTrezor.jpg","2026-08-13T15:13:19+00:00","2026-08-13T16:00:23.481432+00:00",8,[17,20,23,25,27,29],{"name":18,"type":19},"Metabase","product",{"name":21,"type":22},"Trezor","vendor",{"name":24,"type":22},"ShipMonk",{"name":26,"type":19},"Trezor hardware wallet",{"name":28,"type":19},"Framework laptop",{"name":30,"type":19},"Tally online form builder","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":31,"icon":33,"name":34,"slug":35},null,"Breaches","breaches",[37,42,44,49],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":43},{"id":31,"icon":33,"name":34,"slug":35},{"category":45},{"id":46,"icon":33,"name":47,"slug":48},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":50},{"id":51,"icon":33,"name":52,"slug":53},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[21,24,18],{"controls":57,"vendors":145},[58,87,116],{"slug":59,"name":60,"problem":61,"products":62},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[63,71,79],{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"slug":88,"name":89,"problem":90,"products":91},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",[92,100,108],{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","purview-dlp","Microsoft Purview Data Loss Prevention","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fdata-security-governance\u002Fmicrosoft-purview-data-security","Data classification and loss prevention across Microsoft 365, endpoints and connected cloud apps.",{"vendor_slug":101,"vendor_name":102,"vendor_logo":103,"product_slug":104,"product_name":105,"url":106,"description":107},"netskope","Netskope","\u002Fvendor-logos\u002Fnetskope.png","netskope-dlp","Netskope DLP","https:\u002F\u002Fwww.netskope.com\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention for web, cloud apps, AI tools and endpoints.",{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":112,"product_name":113,"url":114,"description":115},"proofpoint","Proofpoint","\u002Fvendor-logos\u002Fproofpoint.png","enterprise-dlp","Proofpoint Enterprise DLP","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention across email, cloud and endpoints.",{"slug":117,"name":118,"problem":119,"products":120},"third-party-risk-management","Third-party risk management (TPRM)","You know which suppliers could hurt you, and you hear quickly when one of them is breached.",[121,129,137],{"vendor_slug":122,"vendor_name":123,"vendor_logo":124,"product_slug":125,"product_name":126,"url":127,"description":128},"bitsight","Bitsight","\u002Fvendor-logos\u002Fbitsight.png","bitsight-tprm","Bitsight Third-Party Risk Management","https:\u002F\u002Fwww.bitsight.com\u002Fproducts\u002Fthird-party-risk-management","Supplier assessments and continuous monitoring based on security ratings.",{"vendor_slug":130,"vendor_name":131,"vendor_logo":132,"product_slug":133,"product_name":134,"url":135,"description":136},"securityscorecard","SecurityScorecard","\u002Fvendor-logos\u002Fsecurityscorecard.png","security-ratings","SecurityScorecard Ratings","https:\u002F\u002Fsecurityscorecard.com\u002Fsolutions\u002Fuse-cases\u002Fsecurity-ratings\u002F","Outside-in security ratings and monitoring of suppliers.",{"vendor_slug":138,"vendor_name":139,"vendor_logo":140,"product_slug":141,"product_name":142,"url":143,"description":144},"upguard","UpGuard","\u002Fvendor-logos\u002Fupguard.png","upguard-vendor-risk","UpGuard Vendor Risk","https:\u002F\u002Fwww.upguard.com\u002Fproduct\u002Fvendor-risk","Supplier security questionnaires, ratings and continuous monitoring.",[],{"slug":147,"title":148,"body":149,"framework_refs":150,"framework_notes":160},"third-party-logistics-breach-exposes-trezor-customer-data-via-unpatched-zero-day","Third-Party Logistics Breach Exposes Trezor Customer Data via Unpatched Zero-Day","Trezor's data breach was not caused by a failure in their own systems, but by a zero-day vulnerability exploited in Metabase, an analytics platform used by their third-party logistics provider, ShipMonk. This highlights the critical risk that vendors and partners introduce into an organization's security posture — your security is only as strong as your weakest third-party link. The exposed data (names, addresses, emails, phone numbers) creates downstream phishing and social engineering risks for affected customers, particularly dangerous given Trezor's cryptocurrency-focused user base. Organizations must treat third-party risk management as a core security discipline, not an afterthought.",[151,152,153,154,155,156,157,158,159],"CIS Control 15 – Service Provider Management","CIS Control 7 – Continuous Vulnerability Management","NIST SP 800-161 – Supply Chain Risk Management","NIST CSF ID.SC-4 – Supplier risk assessment","NIST SP 800-53 SA-9 – External System Services","GDPR Article 28 – Processor obligations and data processing agreements","GDPR Article 33 – Notification of a personal data breach","ISO\u002FIEC 27036 – Information security for supplier relationships","ITIL – Supplier Management Practice",{}]