Trezor says ShipMonk retained data it had promised to delete, exposing another 67,000 US customers to phishing and potential physical-security risk.