Trezor said that its third party shipping partner, ShipMonk, had not erased customer data.

Trezor has identified 67,000 more US customers who placed orders between November 2019 and August 2021 affected by the ShipMonk data breach.

Some records exposed in the breach date to 2019, years beyond the 90-day retention Trezor said its partners had agreed to.