Hardware wallet maker Keystone disclosed a data breach on Saturday after detecting unauthorized access to its website. The company confirmed that an unauthorized third party obtained customer names, contact information, shipping addresses, and purchase details through its e-commerce platform.
Keystone said it detected suspicious access on October 20 and examined activity with Shopify, its e-commerce provider. By October 23, the company had confirmed the unauthorized access. The company stated it blocked the intrusion, patched the vulnerability, and began notifying affected customers. However, Keystone has not disclosed how many buyers were exposed or the precise method of unauthorized access.
The company emphasized that recovery phrases, private keys, and payment information were not compromised in the breach.
Risk of Targeted Scams
The immediate concern is that scammers could use legitimate customer information to impersonate Keystone. The company warned customers about potential fraudulent refund offers, replacement device solicitations, and unsolicited messages requesting sensitive information. Keystone stressed that it never requests recovery phrases or private keys from customers.
Customers have reported receiving suspicious communications purporting to be from Keystone. The company advised customers to independently verify communications through its official website rather than following unexpected links or responding to unsolicited messages.
Broader Security Challenges in Hardware Wallets
Keystone joins several other hardware wallet manufacturers that faced security incidents in 2026. Coldcard disclosed a significant bug involving weak seed-generation randomness, while Ledger reported tampered devices distributed through a reseller. Trezor and Safepal also disclosed customer information breaches involving third-party fulfillment or ordering systems.
