Peaked at #2 Now #4

Keystone wallet website breached, data leaked

Hardware wallet Keystone says its site was breached Oct 20, leaking customer names and addresses, but not private keys or payment data.

First on the board Oct 25, 03:43 · How the board is ranked

Rank over time

Key points

On October 20, Keystone detected unauthorized access to its official website and confirmed on October 23 that a third party obtained customer shipping information.
Exposed data included names, contact details, shipping addresses, and order details (items and prices); payment card or bank details, recovery phrases, private keys, and wallet passwords were not exposed.
Keystone said it blocked access, fixed the vulnerability, opened an investigation, and is emailing affected customers.
Keystone warned that scammers may pose as Keystone by phone, text, email, or mail, and urged customers to never share recovery phrases or private keys.

Key points and the reaction summary are written by AI from the posts on this page. Check the original post. How we use AI

Original post

Keystone Hardware Wallet @KeystoneWallet 65.6K followersOct 25, 01:59

We owe you an apology. On October 20, we detected unauthorized access to our official website. After verifying API activity with Shopify, we confirmed on October 23 that a third party obtained customer shipping information. You trusted us with those details, and we're sorry we didn't keep them safe. Exposed: names, contact details, shipping addresses, and order details (items and prices). Not exposed: payment card or bank details, recovery phrases, private keys, or wallet passwords. We've blocked access, fixed the vulnerability, opened an investigation, and are emailing affected customers. Scammers may pose as Keystone by phone, text, email, or mail, offering refunds, replacement devices, or "fixes" for your order or address. None of it is from us. NEVER share your recovery phrase or private keys, and NEVER enter your recovery phrase into a device you didn't order. We will never ask for them. Don't click links in unexpected messages. Type https://t.co/7km8AZM288 yourself. A detailed report is coming soon. Until then, trust only our official channels. If anything feels off, email support@keyst.one. We'd rather hear from you than have you take a chance. Again, we're truly sorry to everyone affected.

1,084likes 284reposts 245replies 498.4Kviews

View on X Save

What others are saying

1 more

Cointelegraph @Cointelegraph Oct 25, 07:00147

Hardware wallet maker Keystone says hackers breached its site, stealing customer names, contacts, addresses and order info; seed phrases and keys untouched but fake support scams expected.
View on X

Top replies on X

Reaction on X: Replies are largely critical, questioning why Keystone retained customer addresses long-term and asking about the number of customers affected and the scope or retention period of the data. No response from the original poster is shown.

From @Erik78910, @PEPE_Whale69, @wii_mee and others. Spam removed, with English and Chinese translations.

Discussion 0

Top Newest

No comments yet. Start the conversation.