The Trezor data breach has expanded after ShipMonk discovered that older customer records remained stored despite previous deletion assurances.