Trezor Fulfillment Partner Breach Exposes 13,689 Customers’ Data

The exposure here is not keys or funds but identity data, which is precisely the material phishing and physical-intimidation campaigns are built from. It shifts the threat model for hardware wallet buyers from device integrity toward the logistics layer, where a vendor's security posture is invisible to the customer. The detail worth watching is whether the affected cohort reports targeted follow-ups, and whether hardware vendors begin treating fulfillment partners as part of their own attack surface.