Keystone hardware wallet web shop breach exposed customer names, contact details and shipping addresses

Summary

Hardware wallet maker Keystone disclosed on 2026-10-24 that a third party gained unauthorized access to its official website and obtained customer shipping information. Keystone says it detected the access on October 20 and, after verifying API activity with its e-commerce provider Shopify, confirmed the data exposure on October 23. Keystone says no recovery phrases, private keys, wallet passwords or payment details were exposed.

Affected

• Keystone customers whose order data was held by the official Keystone web shop (number of affected customers not disclosed)
• Exposed per Keystone: names, contact details, shipping addresses, and order details (items and prices)
• Not exposed per Keystone: payment card or bank details, recovery phrases, private keys, wallet passwords
• Fixed: Keystone says it blocked the access, fixed the vulnerability, opened an investigation, and is emailing affected customers. A detailed report has been announced but was not published at the time of this advisory.

Impact

No loss of funds has been reported. The leaked names, contact details, addresses and order details can be used for targeted phishing. Keystone warns that scammers may pose as Keystone by phone, text, email, or mail, offering refunds, replacement devices, or "fixes" for orders or addresses. How the access was obtained has not been disclosed.

Recommended actions

• Keystone customers: treat any unsolicited message or call referencing your order, a refund, a replacement device or an address "fix" as a scam.
• Never share your recovery phrase or private keys, and never enter your recovery phrase into a device you did not order yourself. Keystone states it will never ask for them.
• Do not click links in unexpected messages; type the official Keystone domain (keyst.one) yourself, and contact support@keyst.one if in doubt.
• Watch for physical mail or packages purporting to come from Keystone.

Source & attribution

This 0xCERT advisory summarises a disclosure by Keystone (https://x.com/KeystoneWallet/status/2114054080754770137), with additional timeline detail reported by Bitcoin.com News (https://news.bitcoin.com/security/keystone-wallet-data-breach-exposes-buyers-addresses-to-scammers/). Details may change; refer to the original source for the authoritative record.