Your seed is safe. Your doorstep might not be.
Keystone Hardware Wallet says a third party accessed its official website. Timeline per the company:
• Oct 20: unauthorized access detected
• Oct 23: after checking Shopify API activity, confirmed customer shipping info was taken
• Oct 24: public disclosure
Exposed: names, contact details, shipping addresses, items bought and prices.
Not exposed (per Keystone): card/bank details, recovery phrases, private keys, wallet passwords.
Access is blocked, the hole is patched, affected users are getting emails, and a detailed report is promised "in the coming days."
Why it still matters: a leaked order list tells scammers exactly who owns a hardware wallet and where they live. Expect fake "refund", "replacement device" or "shipping problem" messages that look very real.
Simple rules:
• No real support team ever asks for your recovery phrase
• Never enter your seed into a device you didn't order yourself
• Ignore links in surprise emails/SMS; go to the official site directly
Market backdrop: $BTC 80,566 (-0.95% 24h, low 79,221) on Binance spot at 05:22 UTC+9. A data leak doesn't move price, but drawdowns are peak season for "urgent" scam messages.
Bull case: a fast, transparent report rebuilds trust. Bear case: targeted phishing wave over the coming weeks.
Do you buy hardware wallets direct or through resellers?
Source: https://thedefiant.io/news/security/keystone-website-breach-exposes-customer-addresses-and-order-details
#WriteToEarn
Not financial advice. DYOR.
Keystone Hardware Wallet says a third party accessed its official website. Timeline per the company:
• Oct 20: unauthorized access detected
• Oct 23: after checking Shopify API activity, confirmed customer shipping info was taken
• Oct 24: public disclosure
Exposed: names, contact details, shipping addresses, items bought and prices.
Not exposed (per Keystone): card/bank details, recovery phrases, private keys, wallet passwords.
Access is blocked, the hole is patched, affected users are getting emails, and a detailed report is promised "in the coming days."
Why it still matters: a leaked order list tells scammers exactly who owns a hardware wallet and where they live. Expect fake "refund", "replacement device" or "shipping problem" messages that look very real.
Simple rules:
• No real support team ever asks for your recovery phrase
• Never enter your seed into a device you didn't order yourself
• Ignore links in surprise emails/SMS; go to the official site directly
Market backdrop: $BTC 80,566 (-0.95% 24h, low 79,221) on Binance spot at 05:22 UTC+9. A data leak doesn't move price, but drawdowns are peak season for "urgent" scam messages.
Bull case: a fast, transparent report rebuilds trust. Bear case: targeted phishing wave over the coming weeks.
Do you buy hardware wallets direct or through resellers?
Source: https://thedefiant.io/news/security/keystone-website-breach-exposes-customer-addresses-and-order-details
#WriteToEarn
Not financial advice. DYOR.