Keystone, a manufacturer of crypto hardware wallets, has revealed a security breach on its website that exposed customer data to hackers. The company announced on Saturday that it had detected unusual activity earlier in the week and confirmed the breach on Friday after reviewing API logs with Shopify. The attackers gained access to customer shipping details, including names, contact information, and order specifics. Keystone has since blocked the breach, fixed the vulnerability, and launched an investigation, notifying affected customers via email.
The exposed data raises concerns about targeted phishing attacks and physical threats. Security researcher Taylor Monahan highlighted that leaked shipping addresses could make customers vulnerable to physical attacks or kidnappings. Blockchain security firm CertiK reported a 33% increase in so-called “wrench attacks” worldwide in the first half of 2026, where criminals use physical force to steal cryptocurrency.
Keystone has also faced questions about its data retention policies. In 2023, the company claimed it had reduced customer data retention to 180 days following security incidents affecting other hardware wallet manufacturers. However, some customers reported receiving breach notifications despite purchasing devices over two years ago, suggesting that older records may not have been deleted as promised.
One X user, “OG DEGEN,” received a call from a scammer claiming to be law enforcement, referencing personal details from a 2024 Keystone order. The user suspected the caller intended to send a phishing link to reset private keys. Another X user, trintaetres, also received a breach notification despite buying a device over two years prior. Keystone did not respond to inquiries about how older data was exposed or how many customers were affected.