Geo News
Community curated by people like you
LatestAICryptoHealthWorld AffairsUS Politics
Keystone hardware wallet website breach exposes customer data
00

Keystone hardware wallet website breach exposes customer data

Oct 24, 2026

Keystone Hardware Wallet disclosed on October 24, 2026, that unauthorized actors accessed its official website on October 20, exposing customer names, contact details, shipping addresses, and order histories. After investigating Shopify API activity, Keystone patched the vulnerability, blocked access, and notified impacted users. Sensitive credentials, including private keys and recovery phrases, were not compromised. Keystone warned users of potential phishing scams, joining competitors Trezor and Ledger in recent security incidents.

Keystone website breach incident

  • ▪Keystone Hardware Wallet disclosed on October 24, 2026 that unauthorized actors accessed its official website on October 20, 2026
  • ▪Keystone Hardware Wallet confirmed on October 23, 2026, after reviewing API activity with Shopify, that a third party had obtained customer data

Compromised customer data types

  • ▪The third-party access to Keystone Hardware Wallet's official website on October 20, 2026, specifically resulted in unauthorized access to customer shipping information held by the company
  • ▪The October 20, 2026 website breach at Keystone Hardware Wallet exposed customer names, contact details, shipping addresses, and order details including items purchased and prices

Protected sensitive information

  • ▪Keystone Hardware Wallet confirmed that sensitive cryptographic credentials, including seed recovery phrases and private keys, remained unexposed during the October 20, 2026 unauthorized access to its website
  • ▪Keystone Hardware Wallet stated that payment card details, bank details, and wallet passwords were not compromised during the October 20, 2026 website breach

Company security response

  • ▪Following the unauthorized access to its website on October 20, 2026, Keystone Hardware Wallet blocked unauthorized access, patched the website vulnerability, and began notifying customers affected by the breach via email
  • ▪Keystone Hardware Wallet initiated an investigation into the October 20, 2026 website breach and announced plans to release a detailed investigation report in subsequent days

Scam warnings for customers

  • ▪Keystone Hardware Wallet urged customers to avoid clicking unexpected links and never enter recovery phrases or private keys into devices or online platforms
  • ▪Keystone Hardware Wallet warned customers that scammers might pose as company representatives offering fake refunds, replacement hardware devices, or shipping assistance following the October 20, 2026 breach

Hardware wallet industry breaches

  • ▪Hardware wallet manufacturer Trezor disclosed a customer data breach in August 2026 caused by unauthorized access at its third-party logistics provider, ShipMonk
  • ▪Hardware wallet maker Ledger confirmed in October 2026 that criminals had modified genuine hardware devices to steal recovery phrases before reselling them through Southeast Asian distributors

2 sources

The Defiant
Keystone Website Breach Exposes Customer Addresses and Order Details
View source article
Crypto Briefing
Keystone Hardware Wallet says website breach exposed customer data
View source article

Story comments

Loading comments…

Topics

Hardware walletCrypto securityCybercrimeSelf-custodyCrypto walletsBitcoin wallets & custody