Keystone confirms unauthorized access to official website; customers’ names and delivery information exposed

AT A GLANCE

Keystone confirms unauthorized access to its official website, exposing customers’ delivery and order information, but not mnemonic phrases, private keys, or wallet passwords.

Article

Hardware wallet Keystone confirms unauthorized access to official website; customers’ names and delivery information exposed

BlockBeats reports that October 25, hardware wallet manufacturer Keystone issued an apology, stating that on October 20 it discovered unauthorized access to its official website, and after verifying with Shopify API activity, on October 23 confirmed that a third party had obtained customers’ delivery information. The incident involved customers’ names, contact details, delivery addresses, and order details, including product names and prices, but did not involve bank card or bank account information, mnemonic phrases, private keys, or wallet passwords.

Keystone said it had blocked the relevant unauthorized access, fixed the vulnerability, and launched an investigation, while notifying affected customers by email. The company also plans to publish a detailed investigation report in the near future and reminded users to trust only official channels during this period.

Keystone warned that scammers may impersonate official representatives by phone, text message, email, or postal mail, and carry out scams under the pretext of issuing refunds, replacing devices, or fixing order and address issues. Users must not disclose their mnemonic phrases or private keys to anyone, and must not enter mnemonic phrases on devices they did not order themselves. For messages received unexpectedly, do not click the links in them; instead, enter the official website address manually. If in doubt, contact customer service through official channels.

Original link https://m.theblockbeats.info/flash/373553

Key points

Keystone discovered on October 20 that its official website had been subject to unauthorized access.
Keystone confirmed on October 23 that a third party had obtained customers’ delivery information.
The information involved included customers’ names, contact details, delivery addresses, product names, prices, and other order details.
The incident did not involve bank card or bank account information, mnemonic phrases, private keys, or wallet passwords.
Keystone said it had blocked the relevant access, fixed the vulnerability, and launched an investigation, and plans to publish a detailed investigation report.
Keystone is notifying affected customers by email and reminding users to beware of scams involving impersonation of official representatives.

AI-assisted interpretation

The following is analysis, separate from reported facts. Verify important claims independently.

This incident primarily involved customers’ contact and delivery information, as well as order contents, and did not include the wallet credentials listed in the article. The exposed information may be used to impersonate official representatives in scams involving refunds, device replacements, or order fixes.

Why it matters to readers

Names, contact details, addresses, and order information can help scammers make their impersonation seem more credible. Users should contact Keystone only through official channels, avoid clicking links in unexpected messages, and not disclose mnemonic phrases or private keys.

If you have placed an order on the Keystone website, watch for relevant official notices and suspicious contacts; do not trust someone’s identity merely because they possess your order information.

Risks and unknowns

A detailed investigation report has not yet been published.
The final scope of affected customers has not yet been determined.
The evidence currently available does not indicate whether any actual scams or subsequent misuse have occurred.
The information disclosed so far states that mnemonic phrases, private keys, and wallet passwords were not involved, but the results of the ongoing investigation remain to be confirmed.

Keystone confirms unauthorized access to official website; customers’ names and delivery information exposed

Article

AI-assisted interpretation

Why it matters to readers

Risks and unknowns

Related Developments

Related concepts

Keep following

Security Center