Third-party data retention failure

Order data ShipMonk promised to delete pushes Trezor's breach count to 80,700

The records that expanded Trezor's breach were US orders from 2019 to 2021, held years past the 90-day deletion window its fulfillment partner had promised, which puts the failure in the contract rather than the device.