UPDATED SAT 24 OCT · 22:14 UTCLIVE
SecurityHigh

Keystone Wallet Security Breach

Keystone Hardware Wallet confirmed a third party obtained customer shipping information via unauthorized access to their website and Shopify API, discovered Oct 20 and confirmed Oct 23.

What we know

Keystone publicly apologized after confirming unauthorized access to their official website was detected Oct 20. Shopify API logs confirmed on Oct 23 that a third party extracted customer shipping information. An account on X sarcastically suggests companies should 'just immediately remove customer data.' Hardware wallet users are advised to be vigilant about phishing attempts using leaked shipping data.

How the story developed

24 Oct · 22:14 UTC

Keystone Hardware Wallet confirmed a third party obtained customer shipping information via unauthorized access to their website and Shopify API, discovered Oct 20 and confirmed Oct 23.

24 Oct · 19:15 UTC

Keystone hardware wallet confirmed unauthorized access to its website on Oct 20, leaking customer names, shipping addresses, and order details via Shopify — a critical phishing risk for hardware wallet holders.

By the Global Eye 24 desk, with AI assistance. Updated as the story develops. Spot an error? Write to corrections@globaleye24.com.