Hardware wallet maker Keystone disclosed on Saturday that its own web shop had been broken into. Names, contact details, delivery addresses and order details of customers were taken. Recovery phrases, private keys and payment data are not affected, according to the company. If you bought from Keystone, that means your balance is not at risk from this incident, but your address and the fact that you own a hardware wallet very much are.
That distinction is important, and it decides what makes sense now and what will land you in more trouble. The most dangerous response to a notice like this is a hasty one. Anyone who panics and resets their device, moves coins somewhere unfamiliar or goes along with a supposed replacement programme does not lose their money to the original breach in the end. They lose it to the wave of fraud that follows.
What Keystone disclosed: access on 20 October, confirmation on the 23rd
Keystone noticed the unauthorised access to its company website on 20 October 2026, by its own account. After reviewing API activity at Shopify, the maker's shop provider, the company confirmed on 23 October that a third party had obtained customer shipping data. Keystone made the incident public on...
English (US)