{
  "version": 1,
  "event_id": "evt_4be6f685d0c885ce",
  "url": "https://xiyu.news/events/evt_4be6f685d0c885ce/",
  "json": "https://xiyu.news/api/events/evt_4be6f685d0c885ce.json",
  "type": "security_incident",
  "status": "monitoring",
  "category": "crypto",
  "title": {
    "zh": "Trezor泄露规模扩大至约8.07万用户，旧物流记录被找到",
    "en": "Users exposed by Trezor breach grows sixfold after supposedly deleted shipping logs are found"
  },
  "current_state": {
    "zh": "9月4日，Trezor 更新公告称，物流服务商 ShipMonk 的泄露事件又波及约6.7万名美国客户，这些客户在2019年至2021年间的联系方式与订单数据在承诺删除后仍保留在系统中。加上此前披露的1.37万人，两次通报合计受影响人数约8.07万，但 Trezor 尚未给出统一的总数。\n\n该事件将可识别身份与实体地址同硬件钱包购买记录关联起来，可能被用于更具针对性的钓鱼、诈骗电话或信件，甚至造成人身安全风险。它同时说明，若缺乏独立验证，第三方提出的书面删除保证并不能真正保护用户隐私。\n\n新增泄露数据为2019年11月至2021年8月间的美国订单记录，包括姓名、电子邮箱、电话号码、收货地址和订单编号。Trezor 强调其钱包系统、恢复助记词、私钥和资金均未受影响，目前也尚未确认有任何由这批数据引发的下游攻击。",
    "en": "Trezor's breach at logistics provider ShipMonk now affects ~80,689 customers after old shipping logs from 2019-2021 were found, exposing contact and order data despite deletion assurances."
  },
  "first_seen_at": "2026-09-05T22:09:13.036456+00:00",
  "last_updated_at": "2026-09-05T22:09:13.036456+00:00",
  "last_material_change_at": "2026-09-05T22:09:13.036456+00:00",
  "confidence": 0.75,
  "updates_count": 1,
  "sources_count": 1,
  "entities": [
    "breach",
    "trezor",
    "users"
  ],
  "identifiers": [],
  "topics": [
    "breach",
    "privacy",
    "trezor"
  ],
  "updates": [
    {
      "update_id": "upd_1dc6cfd191dbc5eb",
      "event_id": "evt_4be6f685d0c885ce",
      "occurred_at": "2026-09-05T19:00:02Z",
      "published_at": "2026-09-05T19:00:02Z",
      "first_seen_at": "2026-09-05T22:09:13.036456Z",
      "time_precision": "published",
      "update_type": "initial",
      "material_change": true,
      "title_zh": "Trezor泄露规模扩大至约8.07万用户，旧物流记录被找到",
      "title_en": "Users exposed by Trezor breach grows sixfold after supposedly deleted shipping logs are found",
      "what_changed_zh": "9月4日，Trezor 更新公告称，物流服务商 ShipMonk 的泄露事件又波及约6.7万名美国客户，这些客户在2019年至2021年间的联系方式与订单数据在承诺删除后仍保留在系统中。加上此前披露的1.37万人，两次通报合计受影响人数约8.07万，但 Trezor 尚未给出统一的总数。\n\n该事件将可识别身份与实体地址同硬件钱包购买记录关联起来，可能被用于更具针对性的钓鱼、诈骗电话或信件，甚至造成人身安全风险。它同时说明，若缺乏独立验证，第三方提出的书面删除保证并不能真正保护用户隐私。\n\n新增泄露数据为2019年11月至2021年8月间的美国订单记录，包括姓名、电子邮箱、电话号码、收货地址和订单编号。Trezor 强调其钱包系统、恢复助记词、私钥和资金均未受影响，目前也尚未确认有任何由这批数据引发的下游攻击。",
      "what_changed_en": "Trezor's breach at logistics provider ShipMonk now affects ~80,689 customers after old shipping logs from 2019-2021 were found, exposing contact and order data despite deletion assurances.",
      "current_state_zh": "9月4日，Trezor 更新公告称，物流服务商 ShipMonk 的泄露事件又波及约6.7万名美国客户，这些客户在2019年至2021年间的联系方式与订单数据在承诺删除后仍保留在系统中。加上此前披露的1.37万人，两次通报合计受影响人数约8.07万，但 Trezor 尚未给出统一的总数。\n\n该事件将可识别身份与实体地址同硬件钱包购买记录关联起来，可能被用于更具针对性的钓鱼、诈骗电话或信件，甚至造成人身安全风险。它同时说明，若缺乏独立验证，第三方提出的书面删除保证并不能真正保护用户隐私。\n\n新增泄露数据为2019年11月至2021年8月间的美国订单记录，包括姓名、电子邮箱、电话号码、收货地址和订单编号。Trezor 强调其钱包系统、恢复助记词、私钥和资金均未受影响，目前也尚未确认有任何由这批数据引发的下游攻击。",
      "current_state_en": "Trezor's breach at logistics provider ShipMonk now affects ~80,689 customers after old shipping logs from 2019-2021 were found, exposing contact and order data despite deletion assurances.",
      "detailed_summary_zh": "Trezor's breach at logistics provider ShipMonk now affects ~80,689 customers after old shipping logs from 2019-2021 were found, exposing contact and order data despite deletion assurances.",
      "detailed_summary_en": "Trezor's breach at logistics provider ShipMonk now affects ~80,689 customers after old shipping logs from 2019-2021 were found, exposing contact and order data despite deletion assurances.",
      "background_zh": "Trezor 是硬件钱包制造商，其设备将私钥保存在离线环境中，因此本次泄露不直接威胁用户加密货币资金。事件最初于8月13日披露，当时约1.37万名客户受影响，Trezor 曾声称更早的订单记录已删除；ShipMonk 的未授权访问被归因于分析平台 Metabase 的零日漏洞。Trezor 的数据保留政策要求自有系统及物流合作方在90天后删除客户数据，但旧记录仍在系统中保留，尽管 Trezor 多次收到书面删除保证。",
      "background_en": "Trezor is a hardware wallet manufacturer whose devices keep private keys offline, so this leak does not directly put cryptocurrency funds at risk. The incident was first disclosed on August 13 with about 13,689 customers affected, and Trezor initially said older order records had already been deleted; ShipMonk's unauthorized access was attributed to a zero-day vulnerability in the analytics platform Metabase. Trezor's data-retention policy requires customer details to be deleted from both its own and fulfillment partners' systems after 90 days, but the old records remained despite written assurances.",
      "community_discussion_zh": "",
      "community_discussion_en": "",
      "market_impact_zh": "",
      "market_impact_en": "",
      "importance_score": 7.5,
      "references": [
        {
          "url": "https://thehackernews.com/2026/09/trezor-says-shipmonk-breach-exposed.html",
          "title": "Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers' Data It Said Was Deleted"
        },
        {
          "url": "https://blockonomi.com/shipmonk-breach-exposes-67000-more-trezor-wallet-users-despite-deletion-assurances",
          "title": "ShipMonk Breach Exposes 67,000 More Trezor Wallet Users Despite Deletion Assurances - Blockonomi"
        },
        {
          "url": "https://cyberpress.org/shipmonk-data-breach-2/",
          "title": "ShipMonk Data Breach Exposes Personal Data of 67,000 Additional Trezor Customers"
        }
      ],
      "confidence": 0.75,
      "story_ids": [
        "rss:cryptoslate.com_feed_:81d53d9a5bda073a"
      ],
      "sources": [
        {
          "url": "https://cryptoslate.com/users-exposed-by-trezor-breach-grows-sixfold-after-supposedly-deleted-shipping-logs-are-found/",
          "label": "CryptoSlate",
          "source_type": "rss",
          "official": false
        }
      ]
    }
  ]
}