Hardware wallet manufacturer Trezor has disclosed a security incident involving one of its shipping providers, which led to the exposure of personal data.