Trezor
Aug 2026 · Graded Attested · Financial Services · Beyond the filings
Incident summary
TrezorAug 2026
Not yet quantified
AAttested13,689 hardware wallet buyers had their home addresses taken from a fulfilment partner. What capped the damage was a 90-day deletion rule, not a security control. Data you have already deleted cannot be stolen, and nobody puts that on a compliance dashboard.
Financial Services
Trezor discloses data breach affecting nearly 14,000 customers
Initial attack type third-party or supply chain inferred · Impact data theft confirmed
About this record
This incident is beyond the filings: attributed to a company statement, a regulator or court record, or a news report, and graded Attested or Inferred. Every figure links to the source it was read from; if we have read one wrong, tell us at info@hackerinahoodie.com. This index never sums figures across incidents. See the methodology.