Trezor says its wallets remain secure after a shipping provider exposed customer names, contact details and delivery addresses.