Cryptocurrency hardware wallet maker Trezor has expanded a previously disclosed data breach to include another 67,000 US customers.
The Prague-based company disclosed the additional affected customers Friday after receiving new information from one of its shipping providers. The breach exposed data belonging to customers who placed orders between November 2019 and August 2021.
Exposed information included customer names, email addresses, phone numbers and shipping addresses. However, Trezor said attackers did not gain access to its hardware wallets or internal systems.
The company also said the breach exposed no private keys or wallet backup information. Consequently, affected customers do not need to modify or replace their Trezor devices.
Trezor previously disclosed the breach in August, when it identified approximately 13,700 affected customers. The latest disclosure substantially increases the known number of people exposed by the incident.
Additionally, Trezor said it has contacted all customers identified through the latest investigation. The company warned them to watch for fraudulent emails, telephone calls and letters.
Customers should also consider possible physical security risks created by exposed home addresses. Trezor reminded users that legitimate company representatives will never request wallet backup information.
Meanwhile, criminals have increasingly targeted cryptocurrency owners through attacks extending beyond online scams and hacking. Some criminals use stolen personal information to identify people believed to control valuable digital assets.
These attacks can involve home invasions, kidnappings, assaults and hostage situations. Criminals sometimes call them “wrench attacks” because attackers use physical violence to force victims into transferring cryptocurrency.
Furthermore, blockchain analytics firm Chainalysis has tracked more than USD$30 million stolen through physical attacks during 2026. The figure puts this year on pace to challenge or exceed the record established in 2025.
Read more: Crypto treasury stocks regain momentum as market value reaches USD$340B
Read more: BTC Digital completes 10MW Georgia cryptocurrency mining facility
Physical attacks against crypto holders have increased
Physical attacks generated a record USD$58 million in cryptocurrency thefts last year, according to Chainalysis. In addition, leaked addresses can provide criminals with information linking digital wealth to real-world locations.
Hardware wallets keep cryptocurrency credentials offline, reducing exposure to hackers targeting internet-connected devices. They cannot, however, protect owners when criminals obtain personal information through unrelated companies.
Physical attacks against cryptocurrency holders have increased alongside the value and adoption of digital assets. Blockchain security firm CertiK recorded 72 verified “wrench attacks” worldwide during 2025, representing a 75 per cent increase from 2024. Confirmed financial losses exceeded USD$40.9 million, up 44 per cent year-over-year.
The trend continued into 2026. CertiK documented 52 verified attacks during the first half, up 33.3 per cent from 39 a year earlier. Recorded financial exposure jumped from USD$10.5 million to USD$124.2 million over the same period.
Meanwhile, Chainalysis documented 46 violent crypto-related incidents globally through late June, compared with 40 during the same period last year. The firm estimates criminals successfully stole more than USD$30 million through violent attacks during 2026. Additionally, home invasions represented 37 per cent of documented incidents, up from 14 per cent in 2025.
.
