Hardware Wallet Maker Keystone Discloses Customer Data Breach
Keystone confirms unauthorized access to customer shipping data but assures payment info remains secure.
Keystone confirms unauthorized access to customer shipping data but assures payment info remains secure. This is an original TLT brief synthesising 2 outlets (Bitcoin.com, Blockonomi), plus live market data, as of Mon, 26 Oct 2026 12:00:08 UTC.
The breach raises concerns about customer privacy and security in the hardware wallet industry, potentially undermining trust in data protection practices. It also highlights the risks associated with storing shipping information, which could be exploited for targeted phishing attacks.
- Keystone's customer data breach exposed names, addresses, and order details.
- No payment data or recovery phrases were compromised, according to the company.
- The incident occurred despite Keystone's 180-day data deletion policy.
- Total crypto market cap remains stable at $2.75T amid the breach news.
Multiple outlets, including Bitcoin.com, Blockonomi, and Unchained, confirm that Keystone experienced a data breach affecting customer shipping information, including names, addresses, and order details. They agree that the company blocked the unauthorized access and is notifying affected customers. However, the outlets differ on the specifics of Keystone's data handling policies, with Unchained highlighting discrepancies between the company's 180-day data deletion claims and its actual practices. Additionally, while Bitcoin.com mentions the involvement of compromised API keys, this detail is not corroborated by other outlets.
- Keystone Wallet Data Breach Exposes Customer Information to Potential Scammers
- Hardware Wallet Maker Keystone Discloses Customer Data Breach — this brief
Hardware wallet manufacturer Keystone has disclosed a data breach involving unauthorized access to customer information. The breach, which was confirmed by multiple outlets, exposed sensitive customer data including names, contact details, and shipping addresses. The company assured users that payment information and recovery phrases were not compromised.
According to Blockonomi, the breach was caused by an unauthorized third party gaining access to Keystone's systems. The company responded by blocking the unauthorized access and fixing the vulnerability. Keystone is now in the process of notifying affected customers about the incident.
Unchained reports that while Keystone claims to have a 180-day data deletion policy for shipping information, the breach suggests that this policy may not have been fully implemented. This discrepancy raises questions about the company's data handling practices and the effectiveness of its security measures.
Bitcoin.com adds that the breach involved compromised API keys, which were used to send fake hardware wallet recall notices to customers. This detail, however, is not mentioned by other outlets, suggesting it may be specific to a subset of the affected users.
The broader crypto market remains relatively stable amid the news, with the total market cap at $2.75 trillion and Bitcoin trading flat at -0.03% over the past 24 hours. The Fear & Greed Index stands at 50, indicating a neutral market sentiment.
Hardware Wallet Maker Keystone Discloses Customer Data Breac — questions & answers
What data was compromised in the Keystone breach?
Names, contact details, and shipping addresses were exposed, but payment information and recovery phrases remain secure.
How did Keystone respond to the breach?
The company blocked the unauthorized access, fixed the vulnerability, and is notifying affected customers.
Was Keystone's data deletion policy followed?
Unchained reports discrepancies between Keystone's 180-day data deletion policy and the breach details, suggesting the policy may not have been fully implemented.
Which outlets reported this story?
This is an original TLT brief that synthesises reporting from Bitcoin.com, Blockonomi, with the key figures cross-checked for agreement across them. It is not a copy of any one article — follow the source links above for the original reporting.
Original summary — not financial advice. This is an original TLT brief that summarises a development reported elsewhere and adds live market data for context; it is not the original article and reproduces no part of it. Follow the source link above for full details. Crypto is volatile and high-risk — always do your own research.