- Keystone said a third party gained unauthorized access to its official website and obtained customers’ personal information.
- The exposed data included names, contact information, shipping addresses, order histories, purchased-device details and prices.
- Keystone said payment information, wallet passwords, private keys and seed phrases were not compromised.
Hardware crypto wallet maker Keystone confirmed on Oct. 23, 2026, that a third party had obtained customer information after suspicious activity was detected on its official website three days earlier. The breach exposed buyers’ personal and order data, although Keystone said information used to manage crypto assets remained secure.
Keystone said it detected the suspicious activity on Oct. 20. After reviewing API requests with e-commerce platform Shopify, the company confirmed the unauthorized access on Oct. 23.
The exposed information included customers’ names, contact details, shipping addresses and order histories, as well as details about purchased devices and their prices. Keystone said bank card and account data, wallet passwords, private keys and seed phrases were not affected.
Keystone warns of targeted scams
The company said it blocked the unauthorized access, fixed the vulnerability and opened an internal investigation. It is notifying affected customers by email.
Keystone did not disclose the number of affected users, how the attackers gained access or whether any specific individuals or groups were involved. The company said it would publish a detailed report after completing its review.
Keystone also warned that criminals may use the stolen information in targeted scams. Attackers could impersonate company representatives and offer refunds, device replacements or assistance with deliveries.
The manufacturer urged users not to click suspicious links or disclose their seed phrases and private keys. It also warned customers not to enter recovery information into devices they did not order.
Earlier hardware-wallet security incident
The disclosure follows other security issues involving hardware crypto wallet makers. In October 2026, Ledger opened an investigation after reports that more than $86 million had been stolen from customers who purchased devices through CryptoBilis, a reseller in Southeast Asia.
Ledger later found an unauthorized hardware implant in the wallet of one affected user. The device allowed attackers to intercept the seed phrase during the initial setup, according to the source article.
Source: Incrypted
