Trezor's Leaked Orders Reveal a Dark Truth: Deleted Data Is Never Really Gone

In early 2025, Trezor disclosed that a data breach at its third-party logistics provider affected approximately 80,000 customers, with an additional 67,000 U.S. users now confirmed impacted. The most unsettling detail? The leaked information dated back to 2019–2021—orders that were supposedly deleted after the retention period expired. Yet there they were, resurrected from some forgotten backup, proving that in the digital age, deletion is often a polite fiction.

The Myth of Deletion

When you click "delete" on a cloud service, you trust that the data is gone. But Trezor's incident shows otherwise. The logistics partner had retained order details beyond the agreed timeframe, and when their systems were compromised, that lingering data became a liability. This is not an isolated case. In 2019, a similar breach at a third-party vendor exposed Capital One customer data that had been stored on misconfigured servers. The pattern is consistent: companies promise deletion, but operational realities—backups, logs, legacy systems—often mean data persists indefinitely.

For hardware wallet users, this breach is particularly ironic. Trezor devices are designed to secure cryptographic keys offline, yet the company's supply chain leaked personal information—names, addresses, email addresses—that could enable targeted phishing attacks. A sophisticated attacker could use this data to craft convincing emails referencing past purchases, tricking users into revealing their recovery seeds. The hardware remains secure; the human behind it becomes the weakest link.

The Economics of Storage Trust

This incident underscores a fundamental tension in data storage: the difference between short-term convenience and long-term custody. Subscription-based cloud drives—Dropbox, Google Drive, iCloud—operate on a recurring revenue model. Your data sits on their servers, managed by their policies, subject to their retention schedules. When you cancel or delete, you have no guarantee that copies don't linger in backups or archives.

Consider the economics: a 100 GB subscription costs roughly $120 per year. Over a decade, that's $1,200—for data that may or may not be deleted when you leave. Compare that to a one-time payment model, where you pay once and the storage fee is prepaid forever. For critical documents—legal contracts, family photos, research data—the latter offers a different kind of trust: not based on recurring promises, but on a cryptographic guarantee that your data is written permanently to a decentralized network.

A Better Model: Permanent Storage by Design

Arweave, the blockchain underlying Long Drive, takes a different approach. Instead of promising deletion, it embraces permanence. You upload a file, pay a one-time fee, and the data is replicated across a distributed network, stored forever. There is no central server to breach, no retention policy to violate, no "deleted but still there" surprise. This model aligns incentives: the platform earns revenue upfront, not through ongoing subscriptions, so there's no pressure to hold your data hostage or mine it for ads.

For individuals and enterprises alike, the question shifts from "How do I delete data?" to "How do I ensure my data remains intact and private for decades?" Long Drive offers optional client-side AES-256-GCM encryption, meaning even if the network is compromised, your files are unreadable without your password. This is a stark contrast to Trezor's logistics partner, where personal data sat in plain text, waiting to be exploited.

The Real Lesson

Trezor's breach is a wake-up call for anyone who assumes that "deleted" equals "gone." It also highlights the fragility of centralized storage systems, where a single vendor's mistake can expose thousands of users. As we generate more data—photos, documents, medical records—we must choose storage solutions that match the intended lifespan of that data. For fleeting files, a subscription cloud is fine. For what matters, consider a permanent home.

Long Drive, built on Arweave, offers that permanence. It's not about being the most feature-rich cloud drive; it's about being the most honest about what storage means. When you write data to a blockchain, you're not renting space—you're buying a plot of digital land that will outlive you. That's a different kind of trust, one that doesn't rely on a company's promise to delete, but on a network's design to remember.