The incident marks the first time Trezor customers’ shipping addresses were exposed.