KEYSTONE HARDWARE WALLET CONFIRMS CUSTOMER SHIPPING DATA BREACH

Summary from the TLDR Crypto newsletter

Keystone Hardware Wallet confirmed on October 23 that a third party accessed customer shipping data through its website, exposing names, addresses, contact details, and order information, while payment credentials, recovery phrases, private keys, and wallet passwords remained unaffected. The breach was detected on October 20 and traced through Shopify API logs. Keystone has blocked the access, patched the vulnerability, and opened a formal investigation with customer notifications underway. Keystone warns affected users to expect phishing attempts from actors impersonating the company offering refunds or replacement devices, and urges customers never to share recovery phrases and to navigate to the site directly rather than clicking unsolicited links.