Trezor says a ShipMonk data breach exposed personal information belonging to 13,689 customers, including home addresses, phone numbers and emails.