Hardware Wallet Keystone Confirms Unauthorized Website Access, Customer Names and Shipping Addresses Exposed

According to BlockBeats, hardware wallet provider Keystone confirmed on October 25 that its official website suffered unauthorized access on October 20. After verifying Shopify API activities, the company determined on October 23 that a third party obtained customer shipping information, including names, contact details, addresses, and order details such as product names and prices. No banking details, seed phrases, private keys, or wallet passwords were compromised.

Keystone has blocked unauthorized access, patched vulnerabilities, and notified affected customers via email. The company plans to release a detailed investigation report soon and warns users to only trust official channels. It cautioned that fraudsters may impersonate the company via phone, SMS, email, or mail to solicit refunds or device replacements; users should never share seed phrases or private keys and should avoid entering them into devices they did not purchase.