The company identified unauthorized access to its website on October 20, confirming the theft three days later after reviewing API activity tied to its Shopify e-commerce integration. Although Keystone has since blocked the breach and initiated a formal investigation, it has yet to disclose the total number of affected users or the specific technical vulnerability that allowed the intrusion.
In section Cryptocurrency
Keystone Data Breach Exposes Customer Addresses and Order Details
A security breach at hardware wallet manufacturer Keystone has compromised the personal information of its user base, exposing names, home addresses, and specific purchase histories. While the company confirmed that private keys and recovery phrases remain secure, the leak leaves customers vulnerable to sophisticated phishing and physical security threats.
Security experts warn that the exposure of physical shipping addresses carries risks beyond digital fraud. Publicly identifiable information linking individuals to cryptocurrency hardware can facilitate "wrench attacks," where criminals use coercion or violence to force owners to surrender assets. Keystone has urged its customers to remain vigilant against fraudulent communications, including emails or physical mail claiming to be from the company. The incident mirrors a significant 2020 breach at Ledger, where stolen contact databases led to years of targeted phishing campaigns against wallet owners. Keystone has promised a comprehensive incident report as it continues to notify those impacted by the leak.
Comments (0)
No comments yet. Be the first!