Secure

SafePal

2026

would

when

<h2 id="b-tldr-b">TLDR:</h2>
<ul>
 <li style="font-weight: 400">Keystone detected unauthorized website access on October 20 and confirmed customer data exposure October 23.</li>
 <li style="font-weight: 400">Exposed records included customer names, emails, phone numbers, shipping addresses, products and prices.</li>
 <li style="font-weight: 400">Keystone said payment details, wallet passwords, private keys and recovery phrases were not compromised.</li>
 <li style="font-weight: 400">Keystone has not identified the attacker, the number of affected customers or the duration of website access.</li>
</ul>
Keystone Hardware Wallet confirmed that unauthorized access to its website exposed customer names, contact details, shipping addresses and purchase records. The breach, detected October 20, 2026, was confirmed three days later following a review of Shopify application programming interface activity.
In an October 24 disclosure, the hardware wallet manufacturer said an unauthorized third party had obtained order information. The company blocked access, fixed the identified vulnerability and opened an investigation, while the number of affected customers remained undisclosed. No tally of affected transactions accompanied the disclosure.
<div class="embed-x">
 <blockquote class="twitter-tweet">
 Keystone Confirms Customer Data Exposure Following Unauthorized Website Access
 Keystone Hardware Wallet confirmed that a third party obtained customer shipping and order information following unauthorized access to its official website. The incident was detected on October 20,… <a href="https://t.co/tZMXH6xIHZ" rel="noopener noreferrer nofollow">pic.twitter.com/tZMXH6xIHZ</a>
 — Wu Blockchain (@WuBlockchain) <a href="https://x.com/WuBlockchain/status/2114087340536889689?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">October 24, 2026</a>
 </blockquote>
</div>
The incident exposed records linked to cryptocurrency storage device purchases, rather than information held inside the wallets themselves. The compromised records listed purchased products and prices, alongside customer identities and delivery locations. The affected information connected device purchases to identifiable customers, but no <a href="https://blockonomi.com/uni-wallet-creation-reaches-highest-level-since-november-2022/" rel="noopener noreferrer nofollow">wallet credential compromise</a> was reported.
<h2 id="b-keystone-website-intrusion-exposes-customer-orders-and-addresses-b">Keystone Website Intrusion Exposes Customer Orders and Addresses</h2>
Shopify operates the manufacturer’s online store and processes its order information, according to the <a href="https://keyst.one/privacy-policy" rel="noopener noreferrer nofollow">company’s privacy policy</a>. That policy also says records are deleted after 180 days when customers have not placed another order.
The deletion provision does not identify which historical purchases were included in this breach. However, the disclosure did not identify the affected purchase dates or establish how long unauthorized access remained possible.
Investigators have not publicly attributed the intrusion or explained the precise method used to enter the website. Affected customers were being notified by email. The company also said a fuller incident report would follow, although it supplied no publication date.
Keystone said payment card numbers, bank account details, wallet passwords, private keys and <a href="https://moneycheck.com/kentucky-house-bill-380-amendment-sparks-hardware-wallet-recovery-controversy/" rel="noopener noreferrer nofollow">recovery phrases</a> were not exposed. Its wallets use offline transaction signing, with QR-code communication limiting direct connections to internet-enabled devices.
<h2 id="b-private-keys-remain-secure-as-phishing-warnings-intensify-b">Private Keys Remain Secure as Phishing Warnings Intensify</h2>
Nevertheless, the company warned customers about fraudulent refund offers, replacement device schemes and messages claiming to provide order assistance. Such approaches may appear through email, phone calls or text messages.
Customers were advised not to share recovery phrases or <a href="https://blockonomi.com/fidelity-warns-bitcoin-private-keys-face-quantum-computing-risk/" rel="noopener noreferrer nofollow">private keys</a>, enter recovery phrases into unexpected replacement devices, or follow suspicious links. The company also urged verification through official communication channels.
The breach joins other customer data incidents involving hardware wallet sellers. In August, <a href="https://trezor.io/blog/news/recent-customer-data-exposed-in-shipping-provider-incident" rel="noopener noreferrer nofollow">Trezor disclosed</a> a ShipMonk shipping-provider breach, later identifying approximately 67,000 additional affected U.S. customers.
<a href="https://coincentral.com/safepal-data-breach-exposes-personal-data-of-nearly-40000-crypto-wallet-customers/" rel="noopener noreferrer nofollow">SafePal also disclosed</a> an order-tracking authorization flaw affecting 39,798 customers. In that case, personal and purchase records were exposed without direct compromise of <a href="https://parameter.io/belgian-hardware-wallet-firm-ngrave-confirms-2-56m-crypto-theft-via-hijacked-push-notifications/" rel="noopener noreferrer nofollow">wallet credentials</a>.
Across these incidents, exposed information sat in ordering or fulfillment systems rather than wallet signing mechanisms. Keystone has yet to publicly disclose its affected customer count, the underlying access method or the exposure window.
The post <a href="https://blockonomi.com/keystone-confirms-customer-data-breach-following-unauthorized-website-access/" rel="noopener noreferrer nofollow">Keystone Confirms Customer Data Breach Following Unauthorized Website Access</a> appeared first on <a href="https://blockonomi.com" rel="noopener noreferrer nofollow">Blockonomi</a>.

Keystone Confirms Customer Data Breach Following Unauthorized Website Access

Table of Contents

Blockonomi

Other articles published on Oct 24, 2026

Join our free newsletter for daily crypto updates!