Crypto wallet manufacturer Keystone confirms website breach; 18,000 devices to be destroyed đł
Hardware wallet manufacturer Keystone has reported a breach of its official website, an incident discovered on October 20.
The attacker exploited a vulnerability in a third-party service used by the company for website monitoring, gaining access to customer data as well as a device authentication key.
Seed phrases, private keys, and other wallet-related data remain secure. However, order records from Shopifyâcovering the period from 2024 to 2026 and involving nearly 26,000 customersâwere compromised, including names, contact information, and shipping addresses.
With the stolen key, it would be possible to produce counterfeit devices that could successfully pass authentication checks on the Keystone website.
The company has decommissioned the compromised key and announced that it will destroy over 18,000 units currently in its inventory, while halting shipments until production can resume using a new, secure key.
#BTC
Hardware wallet manufacturer Keystone has reported a breach of its official website, an incident discovered on October 20.
The attacker exploited a vulnerability in a third-party service used by the company for website monitoring, gaining access to customer data as well as a device authentication key.
Seed phrases, private keys, and other wallet-related data remain secure. However, order records from Shopifyâcovering the period from 2024 to 2026 and involving nearly 26,000 customersâwere compromised, including names, contact information, and shipping addresses.
With the stolen key, it would be possible to produce counterfeit devices that could successfully pass authentication checks on the Keystone website.
The company has decommissioned the compromised key and announced that it will destroy over 18,000 units currently in its inventory, while halting shipments until production can resume using a new, secure key.
#BTC