Trezor said its shipping provider data breach was larger than first estimated, expanding to about 67,000 additional U.S. customers who ordered between November 2019 and August 2021. Exposed data included names, emails, phone numbers, shipping addresses, and order details. Trezor said its own systems were not compromised, but the stolen information could be used in phishing and social engineering attacks impersonating Trezor to trick users into revealing seed phrases and losing wallet access. Trezor initially estimated 14,000 affected users, and had previously warned about about 66,000 users at risk from support-related data exposure.