Keystone hardware wallet breach exposes customer addresses and order details
Keystone confirms customer data leak
Keystone, a maker of physical hardware devices used to store crypto assets, said its website was hacked. The company disclosed on October 24 that an unauthorized user accessed the site and obtained customer personal data, including names, contact details, and shipping addresses.
The breach also leaked order details, such as the specific items purchased and their prices. Keystone stated that sensitive security data, including private keys, recovery phrases, wallet passwords, and bank or card details, were not exposed.
What happened and what was exposed
- Keystone detected unauthorized access on October 20 and confirmed it on October 23 after checking activity on its web platform.
- The exposed data included customer names, emails, phone numbers, and physical delivery addresses.
- Order records revealed what was bought and the prices paid.
- Keystone confirmed that no private keys, recovery phrases, or financial account details were stolen.
Company response and next steps
Keystone reported that it immediately blocked the unauthorized access and fixed the vulnerability in the system. The company opened an investigation and began emailing affected customers to inform them of the breach. In a follow-up note, the company said a detailed report of the incident would be published in the coming days. The notice did not specify exactly how many customers were affected or the total length of the access window.
Why this matters for wallet users
Even though the core security keys were not stolen, the combination of names and delivery addresses could be used to target customers with phishing attacks. Keystone warned that scammers might call, text, or email affected users, posing as support agents and offering fake refunds or replacement devices. The company urged customers to never share their recovery phrases and to type the company's website directly into their browsers rather than clicking links in unexpected messages.
Context of recent hardware wallet breaches
This incident follows similar data leaks at other hardware wallet companies. Trezor previously reported a breach affecting its shipping provider that exposed details of over 80,000 customers. SafePal also disclosed a flaw that affected roughly 40,000 customers who placed orders earlier this year. These repeated incidents highlight the physical security risks associated with buying and shipping crypto devices.
Where this information comes from
Newisty Editorial Team covers technology, cryptocurrency, digital products, online platforms, developer tools and the wider digital economy. Our content is researched from official sources, company announcements, public documentation, market data and other primary or reputable sources. Articles are reviewed and edited before publication for clarity, accuracy and useful context.