Crypto hardware wallet maker Keystone has disclosed a website security breach that exposed customer information to attackers, raising concerns about targeted scams and physical attacks.&nbsp;
Keystone <a href="https://x.com/KeystoneWallet/status/2114054080754770137?s=20" rel="noopener noreferrer nofollow">said</a> Saturday that it detected suspicious activity earlier in the week and confirmed Friday, after reviewing API activity with Shopify, that an unauthorized third party had accessed customer shipping information. This included names, contact details, shipping addresses and other order details, such as items bought.&nbsp;
“We’ve blocked access, fixed the vulnerability, opened an investigation, and are emailing affected customers,” said the company.
Keystone warned that the exposed information could be used for targeted phishing attacks. However, security researcher Taylor Monahan also <a href="https://x.com/tayvano_/status/2114135500760158435?s=46&amp;t=MuRujqZUAz3TQE1vmr3c6A" rel="noopener noreferrer nofollow">raised</a> concerns that leaking shipping addresses could expose customers to physical attacks and kidnappings.&nbsp;
Blockchain security firm CertiK<a href="https://ct.com/news/crypto-home-invasions-wrench-attacks-certik-h1-2026" rel="noopener noreferrer nofollow">recorded 52 verified wrench attacks worldwide</a> in the first half of 2026, up 33% from 39 during the same period last year. Such crimes, commonly called “wrench attacks,” involve using physical threats or violence to force cryptocurrency holders to surrender their assets.&nbsp;
“Again, we’re truly sorry to everyone affected,” Keystone said. The company did not disclose how many customers were impacted.&nbsp;
<h2 id="keystone-questioned-over-promise-to-delete-customer-data">Keystone questioned over promise to delete customer data</h2>
The breach has also raised questions about Keystone’s handling of older customer information.&nbsp;
In a 2023 blog post, Keystone said it had <a href="https://keystonewallet.crisp.help/en/article/shipping-data-retention-policy-1vr06sm/" rel="noopener noreferrer nofollow">reduced</a> its customer data retention period to 180 days following security incidents affecting other hardware wallet manufacturers.&nbsp;
However, some customers said they received breach notifications despite purchasing their devices more than two years ago, raising questions about what information Keystone retained and whether the notifications indicate that older order records were not deleted as promised.&nbsp;
Related: <a href="https://ct.com/news/italy-government-email-breach-revolut-data-leak" rel="noopener noreferrer nofollow">Italy investigates government email breach linked to Revolut data leak</a>
An X user going by “OG DEGEN” said they <a href="https://x.com/PEPE_Whale69/status/2113772005602349442?s=20" rel="noopener noreferrer nofollow">received</a> a call from a scammer claiming they were law enforcement investigating a fraud case. The user suspected the caller obtained their information through a Keystone order placed in 2024, based on the personal information the caller referred to.&nbsp;
“I think their plan was to convince me that my private keys had been exposed and then send me a phishing link to supposedly reset them,” they wrote on X.&nbsp;
Another X user, trintaetres, also <a href="https://x.com/trintaetres_33/status/2114140030172012679?s=20" rel="noopener noreferrer nofollow">said</a> they received the email notification despite buying the device over two years ago.&nbsp;
Cointelegraph contacted Keystone to ask how customer information from purchases made more than 180 days earlier could have been exposed despite its previously announced retention policy, and how many customers were affected. The company did not respond by publication time.&nbsp;
Magazine: <a href="https://ct.com/magazine/ai-agents-help-rescue-eths-glamsterdam-fork-steal-my-bitcoin-site-hodlers-digest" rel="noopener noreferrer nofollow">AI agents help rescue ETH’s Glamsterdam fork, ‘Steal My Bitcoin’ site: Hodler’s Digest</a>

Keystone says website breach exposed hardware wallet buyers’ addresses

Table of Contents

Cointelegraph

Other articles published on Oct 26, 2026

Join our free newsletter for daily crypto updates!