Keystone Hardware Wallet says website breach exposed customer data

Keystone Hardware Wallet disclosed today that its website was accessed without authorization on October 20, exposing customer names, contact details, shipping addresses and order details, including items purchased and prices. We owe you an apology. On October 20, we detected unauthorized access to our official website. After verifying API activity with Shopify, we confirmed on October 23 that a third party obtained customer shipping information. You trusted us with those details, and we're sorry we… — Keystone Hardware Wallet (@KeystoneWallet) October 24, 2026 The company said it confirmed on October 23, after reviewing API activity with Shopify, that a third party had obtained the information. Payment card and bank details, recovery phrases, private keys and wallet passwords were not compromised, according to Keystone. Keystone said it had blocked access, patched the vulnerability, opened an investigation and was notifying affected customers by email. It warned that scammers could exploit the incident by posing as Keystone representatives and offering refunds, replacement devices or assistance with orders and shipping addresses. The company urged customers to avoid unexpected link...