ShipMonk incident exposed names and contact details of recent customers in seven countries; Trezor says its devices and systems were not compromised.