A breach at Trezor shipping partner ShipMonk exposed names, phone numbers and home addresses of 13,689 customers. Devices are safe, phishing risk is not.