Keystone Hardware Wallet confirmed that unauthorized access to its website exposed customer data including names, contact details, shipping addresses, and purchase records. The intrusion was detected on October 20, 2026, and confirmed three days later following a review of Shopify application programming interface activity.
In an October 24 disclosure, the company said an unauthorized third party obtained order information connected to cryptocurrency storage device purchases. Keystone blocked access, fixed the identified vulnerability, and opened an investigation. The company has not publicly disclosed the number of affected customers or the duration of the unauthorized access.
What Information Was Exposed
The compromised records included customer names, emails, phone numbers, shipping addresses, products purchased, and prices. The exposed information connected device purchases to identifiable customers but did not include wallet credential data.
Keystone said payment card numbers, bank account details, wallet passwords, private keys, and recovery phrases were not exposed. The company's wallets use offline transaction signing with QR-code communication, which limits direct connections to internet-enabled devices.
Ongoing Investigation and Customer Warnings
Investigators have not publicly attributed the intrusion or explained the method used to access the website. Affected customers were being notified by email, and the company said a fuller incident report would follow without specifying a publication date.
Keystone warned customers about fraudulent refund offers, replacement device schemes, and messages claiming to provide order assistance that may appear through email, phone calls, or text messages. The company advised customers not to share recovery phrases or private keys, enter recovery phrases into unexpected replacement devices, or follow suspicious links.
Recent Hardware Wallet Breaches
The breach joins other customer data incidents involving hardware wallet sellers. In August, Trezor disclosed a ShipMonk shipping-provider breach that affected approximately 67,000 additional U.S. customers. SafePal also disclosed an order-tracking authorization flaw affecting 39,798 customers, exposing personal and purchase records without direct compromise of wallet credentials.
