COINTELEGRAPH · 2026-10-26 02:27 UTC

Keystone says website breach exposed hardware wallet buyers' addresses

Keystone hardware wallet maker disclosed a website breach exposing customer shipping addresses, names, and order details to unauthorized third parties. Security researchers warn exposed addresses could enable targeted phishing attacks, physical attacks, and kidnappings; CertiK recorded 52 'wrench attacks' in H1 2026, up 33% year-over-year. Keystone promised in 2023 to delete customer data after 180 days, but breach notifications went to customers from 2+ years ago, raising questions about data retention practices.

Loading the story on Tree News…