negativeSYS.SOURCE: The Hacker News• 2026-09-05T19:47:02+05:30

Trezor Discloses Data Breach via ShipMonk Affecting 67,000 U.S. Customers

#data breach #vulnerability #supply chain #hardware

Trezor disclosed a data breach at its shipping provider ShipMonk, exposing 67,000 U.S. customers' personal and order details despite assurances of data deletion. The breach involved a zero-day SQL injection flaw in Metabase, exploited by the ShinyHunters gang, leading to customer data leaks and potential social engineering risks.

Hardware wallet manufacturer Trezor on Friday disclosed that another 67,000 customers from the U.S. have been impacted in a breach at its shipping provider ShipMonk.

The exposed information includes customer names, email addresses, phone numbers, shipping addresses, and order numbers between November 2019 and August 2021. The breach does not affect the security of the company's hardware wallets

Read original article

*** END OF TRANSMISSION ***

> CHERENKOV RADIATION: UNDERSTANDING SUPERLUMINAL PARTICLE EMISSION > NEIJUAN: A SOCIOLOGICAL CONCEPT OF INTENSIFIED COMPETITION WITHOUT COLLECTIVE BENEFIT > US DIESEL PRICES SURGE TO RECORD $6 PER GALLON AMID IRAN SUPPLY DISRUPTION > EXPLOITATION OF JFROG ARTIFACTORY VULNERABILITIES ENABLES ADMIN PRIVILEGE ESCALATION AND BACKDOOR DEPLOYMENT > CHINA-LINKED UNC3569 EXPLOITS SOGOU INPUT METHOD VULNERABILITY TO DEPLOY GRAYRABBIT BACKDOOR > PAPERCUT ADDRESSES ACTIVELY EXPLOITED VULNERABILITIES WITH NEW SECURITY RELEASES > CRITICAL ANALYSIS OF GPT-6 ASTRA'S CODING CAPABILITIES > CISCO FMC VULNERABILITIES EXPLOITED FOR CREDENTIAL THEFT AND QILIN RANSOMWARE DEPLOYMENT > OPENAI'S GPT-LIVE-1 API ENHANCES REAL-TIME LANGUAGE PROCESSING CAPABILITIES > GOOGLE UNVEILS GEMINI APP FOR WINDOWS PLATFORM> CHERENKOV RADIATION: UNDERSTANDING SUPERLUMINAL PARTICLE EMISSION > NEIJUAN: A SOCIOLOGICAL CONCEPT OF INTENSIFIED COMPETITION WITHOUT COLLECTIVE BENEFIT > US DIESEL PRICES SURGE TO RECORD $6 PER GALLON AMID IRAN SUPPLY DISRUPTION > EXPLOITATION OF JFROG ARTIFACTORY VULNERABILITIES ENABLES ADMIN PRIVILEGE ESCALATION AND BACKDOOR DEPLOYMENT > CHINA-LINKED UNC3569 EXPLOITS SOGOU INPUT METHOD VULNERABILITY TO DEPLOY GRAYRABBIT BACKDOOR > PAPERCUT ADDRESSES ACTIVELY EXPLOITED VULNERABILITIES WITH NEW SECURITY RELEASES > CRITICAL ANALYSIS OF GPT-6 ASTRA'S CODING CAPABILITIES > CISCO FMC VULNERABILITIES EXPLOITED FOR CREDENTIAL THEFT AND QILIN RANSOMWARE DEPLOYMENT > OPENAI'S GPT-LIVE-1 API ENHANCES REAL-TIME LANGUAGE PROCESSING CAPABILITIES > GOOGLE UNVEILS GEMINI APP FOR WINDOWS PLATFORM