Keystone Hardware Wallet Website Breach Exposes Customer Addresses and Order Details
Updated — view changes (3)
· body · New information from a source
Keystone, a hardware wallet maker, disclosed a website breach that exposed customer addresses and order history.The company said it blocked access and patched the vulnerability, and stated that payment details, recovery phrases and private keys were not exposed.Customers on social media have questioned Keystone's claim that it deletes customer information 180 days after orders, citing data visible in the breach that should have been removed under that policy.- Hardware-wallet maker Keystone has confirmed a breach of its website that exposed customer addresses and order details, according to The Defiant.
- The company said it blocked access to the vulnerability and has since fixed it, and maintained that payment details, recovery phrases and private keys were not exposed.
- According to The Block, Keystone customers say the exposed data included information the company had previously said it would delete.
- Keystone has stated it deletes customer information 180 days after orders in most cases, per The Block, but users on X have pushed back on that claim following the breach, questioning whether the deletion policy was actually followed.
- The incident raises questions about how long crypto hardware vendors retain customer order data and whether stated deletion timelines are enforced.
- Keystone has not disclosed how many customers were affected or how the breach occurred, based on the available reporting.
· summary · New information from a source
Keystone's website was breached, exposing customer addresses and order details; the company says payment info and private keys were not compromised.- Keystone confirmed a website breach exposed customer addresses and order details, while customers say the data should have already been deleted under the company's own retention policy.
· headline · New information from a source
Keystone Hardware Wallet Breach Exposes Customer Addresses and Order History- Keystone Hardware Wallet Website Breach Exposes Customer Addresses and Order Details
Every change made to this story after publication is recorded here automatically. A factual error gets a correction as well, on the corrections page.
Hardware-wallet maker Keystone has confirmed a breach of its website that exposed customer addresses and order details, according to The Defiant. The company said it blocked access to the vulnerability and has since fixed it, and maintained that payment details, recovery phrases and private keys were not exposed.
According to The Block, Keystone customers say the exposed data included information the company had previously said it would delete. Keystone has stated it deletes customer information 180 days after orders in most cases, per The Block, but users on X have pushed back on that claim following the breach, questioning whether the deletion policy was actually followed.
The incident raises questions about how long crypto hardware vendors retain customer order data and whether stated deletion timelines are enforced. Keystone has not disclosed how many customers were affected or how the breach occurred, based on the available reporting.
Sources: The Defiant, The Block
This article is for information only and is not financial advice.
What the market did
Each figure is this site’s own reading, with what it was measured against. A blank is a reading nobody took, not a zero. The before-the-headline window prints the rate a RANDOM hour clears the same bar, because a hit rate without its null is not a finding.
Story so far 2 updates
- flashKeystone Hardware Wallet Breach Exposes Customer Addresses and Order Historyfirst reported · 2 sourcesthedefiant.io · theblock.co
- storyKeystone Hardware Wallet Website Breach Exposes Customer Addresses and Order Detailsupdate · 2 sourcesthedefiant.io · theblock.co
