Keystone wallet breach exposes order data, not wallet credentials

The Keystone wallet breach exposed customers’ names, contact details, delivery addresses and purchase records—but not wallet credentials, the hardware-wallet maker said on October 24, 2026. Keystone warned that the stolen information could help scammers impersonate its support team. Key takeaways Keystone confirmed customer-data theft after checking Shopify API activity. Payment information and wallet secrets remained unexposed, Keystone said. The company closed the vulnerability and began notifying customers. What the Keystone wallet breach exposed The stolen records included shipping addresses , customer contact information, products purchased and their prices. Keystone detected unauthorized website access on October 20, 2026 , and confirmed the theft on October 23, 2026 , after reviewing API activity with Shopify, which powers its online store.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to The Cryptonomist.