WuBlockchain
Keystone Hardware Wallet confirmed that unauthorized access to its official website exposed customer shipping and order information. The company detected the incident on October 20 and confirmed the exposure on October 23.
Why it matters
The exposed data included names, contact details, shipping addresses, purchased items and prices. Payment card and bank details, recovery phrases, private keys and wallet passwords were not exposed, making the disclosed incident a customer-data privacy breach rather than an exposure of wallet credentials.
Keystone has blocked the access, fixed the vulnerability and is notifying affected customers. It is also warning of impersonation scams involving fake refunds, replacement devices or order fixes.
Market impact
Leaked contact and order details can give impersonation scams more credibility, making independent verification the immediate priority. Affected customers should verify any refund, replacement-device or order-change request through Keystone's official support channel before sharing information or sending funds.
Frequently asked questions
-
What customer information was exposed in the Keystone data incident?
The exposed fields included names, contact details, shipping addresses, purchased items and prices. Payment card and bank details, recovery phrases, private keys and wallet passwords were not exposed.
-
Were Keystone recovery phrases, private keys or wallet passwords exposed?
No. Keystone said recovery phrases, private keys and wallet passwords were not exposed, as were payment card and bank details.
-
When did Keystone detect and confirm the customer data exposure?
Keystone detected the incident on October 20 and confirmed the customer data exposure on October 23.
-
What has Keystone done to address the unauthorized website access?
Keystone said it blocked the access, fixed the vulnerability and is notifying affected customers.
-
How can affected customers identify Keystone impersonation scams?
Keystone warned of fake refunds, replacement devices and order fixes. Customers should independently verify such requests through Keystone's official support channel before sharing information or sending funds.
WatcherGuru
CryptoSlate
Crypto News
CoinDesk
TheBlock