Keystone Hardware Wallet reported an unauthorized access to its website occurring on October 20. Following an investigation into Shopify API activity, the company confirmed on October 23 that a third party accessed customer shipping information.
Exposed data includes customer names, contact details, shipping addresses, and order specifics such as purchased items and pricing. Keystone stated that payment card information, bank details, wallet passwords, private keys, and recovery phrases remain secure.
The company has patched the vulnerability and blocked the unauthorized access. Affected customers are being notified via email. Keystone is currently conducting an investigation and intends to publish a detailed report soon.
Keystone warned users about potential phishing attempts where scammers might pose as company representatives. Customers are advised to ignore unexpected links and never share recovery phrases or private keys.
