Keystone says an attacker exploited a vulnerability in a third-party data monitoring tool to escalate privileges, accessing 25,964 buyer records with personal data (names, contacts, shipping addresses, orders from 2024–2026) plus 12,873 unpaid checkout records. Recovery phrases, private keys, and payment data were not involved. The attacker also obtained the WebAuth device authentication key, which cannot be rewritten, enabling potential counterfeit devices. Keystone will destroy 18,835 inventory devices, halt shipping, and switch to preorders until new-key production. Erasure of overdue Shopify data is expected November 3, 2026.

AI summary of the linked source — not editorial content.

Story signal · how it spread on X · via Elfa

as of
Spread
i
Distinct X and Telegram accounts Elfa counted behind this story’s reports, summed over the thread. Not posts, not impressions.
64 accounts

first post
Leviathan +44.9 h later

Thread · 1 event
  1. First reportKeystone discloses customer shipping-data exposure after website access64 acc.
  2. Leviathan published this article

All times UTC.

Cited posts

  • @KeystoneWallet Keystone Hardware WalletFirst reportOn X ↗

    We owe you an apology. On October 20, we detected unauthorized access to our official website. After verifying API activity with Shopify, we confirmed on October 23 that a third party obtained customer shipping information. You trusted us with those details, and we're sorry we…

  • @Degenerate_Jpeg Goblin.hlOn X ↗

    Be safe friends https://t.co/QU3No2AhyF

  • @DailyDarkWeb Dark Web IntelligenceOn X ↗

    🚨 Keystone hardware wallet confirms customer data breach Keystone says it detected unauthorized access to its official website on Oct 20. After reviewing API activity with Shopify, it confirmed on Oct 23 that a third party obtained customer shipping information. * Exposed:…

Show 3 more cited posts
  • @CryptoPatel Crypto PatelOn X ↗

    HARDWARE WALLET USERS: KEYSTONE CONFIRMS CUSTOMER DATA EXPOSURE.@KeystoneWallet says attackers accessed customer shipping information through its website, with the incident confirmed on October 23. Exposed: Names, contact details, shipping addresses & order information. Not…

  • @markgadala Mark Gadala-MariaOn X ↗

    🚨 BREAKING: Major Crypto Hardware Wallet Company HACKED. Customer Names, Home Addresses, and Purchase Histories STOLEN. Keystone, a popular cryptocurrency hardware wallet manufacturer, has confirmed a serious security breach exposing sensitive customer information. Here's what…

  • @TFTC21 TFTCOn X ↗

    Keystone hardware wallet confirmed a customer data breach. Hackers accessed their website and exposed names, contact info, shipping addresses, and order details through Shopify API activity. Breach detected October 20, confirmed October 23. Recovery phrases, private keys, and… https://t.co/HIN2oekyRy

58 more accounts posted about this · 1 Telegram channel (no public link)

Social-monitoring data, not investment advice Elfa post text from Xas of

Explore the topic

Loading related coverage…

Explore the full feed

Comments

Loading comments…