01
Hardware wallet maker Keystone disclosed a data breach tied to its website and e-commerce platform.
02
Attackers got in on October 20, 2026 through a compromised third-party monitoring tool, not the wallets themselves.
03
About 25,964 buyer records leaked: names, emails, shipping addresses and order details from 2024 to 2026.
04
Another 12,873 incomplete checkout records, from people who never finished paying, were also exposed.
05
Keystone says recovery phrases, private keys and payment details were not touched.
06
A stolen device authentication key means some counterfeit devices could now pass Keystone's genuine checks.
07
Keystone is destroying 18,835 wallets from its own inventory that used the compromised key.
08
The real risk for most owners is phishing and scam attempts, not stolen crypto -- never share your recovery phrase.