Keystone hardware wallet manufacturer detected unauthorized access to its online store on October 20, 2026, confirming on October 23 that customer names, contact information, shipping addresses and purchase records were exposed. The company disclosed the incident publicly on October 24.
According to Keystone's investigation of Shopify API activity, an unidentified third party obtained the customer data. The company stated that payment card information, bank details, wallet recovery phrases, private keys and passwords were not compromised. Keystone blocked unauthorized access, addressed the vulnerability and began notifying affected customers by email, though the number of affected customers remains undisclosed.