Hardware wallet maker Keystone said unauthorized access to its website exposed customer names, contact details, shipping addresses and order information, according to a BlockBeats report.
Keystone said it detected unauthorized access on October 20 and confirmed the data exposure on October 23 after reviewing API activity with Shopify. It said payment card and bank account details, recovery phrases, private keys and wallet passwords were not involved.
Access blocked as company warns of scams
The company said it had blocked the access, fixed the vulnerability and launched an investigation. It is emailing affected customers and plans a detailed report.
Keystone warned of scammers posing as the company to offer refunds or replacement devices, and urged users never to disclose recovery phrases or private keys.
Source: BlockBeats, 2026-10-25 00:03:15 UTC.