Keystone recently confirmed a data breach where names, addresses, and order details were stolen via a Shopify API vulnerability. While $BTC and $ETH keys remain safe, the leak is a massive privacy failure. Keystone had spent months promising to delete shipping data 180 days after purchase, but users who bought devices over two years ago are receiving breach notifications.
This isn't just about spam. Physical security is the real worry. CertiK tracked 52 wrench attacks in the first half of 2024, a 33% jump from last year. Attackers are already spoofing police phone numbers and using specific order details to social engineer victims. It turns out "deleted" data in the e-commerce world often isn't actually gone.
Keystone fixed the hole on October 20 and confirmed the breach on October 23. They haven't said how many people were hit yet.
Full piece: https://app.binance.com/uni-qr/cart/381376526913912?r=KU1Z4N85&l=en-TR
This isn't just about spam. Physical security is the real worry. CertiK tracked 52 wrench attacks in the first half of 2024, a 33% jump from last year. Attackers are already spoofing police phone numbers and using specific order details to social engineer victims. It turns out "deleted" data in the e-commerce world often isn't actually gone.
Keystone fixed the hole on October 20 and confirmed the breach on October 23. They haven't said how many people were hit yet.
Full piece: https://app.binance.com/uni-qr/cart/381376526913912?r=KU1Z4N85&l=en-TR