Keystone Confirms Security Incident: Approximately 26,000 Customer Records and Device Authentication Keys Leaked

According to a statement from Keystone Hardware Wallet (@KeystoneWallet), its official website was compromised on October 20 by attackers exploiting a vulnerability in third-party monitoring tools. Approximately 25,964 purchase records containing personal information, 12,873 unpaid checkout records, and device WebAuth authentication keys were accessed. Mnemonic phrases, private keys, and payment information remain unaffected. Keystone will destroy 18,835 devices containing the old keys in its inventory, suspend shipments from its official website, and transition to a pre-order system. The company also reminded users that there is no need to transfer their assets and warned them to remain vigilant against scams, including fraudulent "recall" campaigns.