Keystone Reveals Customer Wallet Data Breach

Keystone, a manufacturer of hardware wallets for cryptocurrencies, has announced a security incident in which an unauthorized third party obtained customer data. The attackers gained access to names, contact information, shipping addresses, and order details. Unauthorized access was recorded on October 20 and confirmed on October 23. Keystone stated that payment card details, bank information, recovery phrases, private keys, and wallet passwords were not compromised. The company has blocked access, fixed the vulnerability, and initiated an investigation. Customers were informed via email, but the number of affected individuals was not disclosed. Security researcher Taylor Monahan warned that the leaked addresses could expose cryptocurrency holders to the risk of fraud and physical attacks. In the first half of 2026, 52 attacks involving French keys were recorded, representing a 33% increase compared to the previous year. Questions are also raised about how long the company retained the data, as it announced in 2023 that it only keeps them for 180 days. Customers who purchased a device more than two years ago received a notification about the breach. The case is reminiscent of the Ledger data breach in 2020.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.