Keystone Hardware Wallet Discloses Website Breach Exposing Customer Shipping Data

Keystone Hardware Wallet, the company that sells a physical device built to keep bitcoin out of an attacker’s reach, disclosed on October 24 that a third party obtained its customers’ shipping records through its own storefront. The intrusion was detected on October 20. Keystone confirmed the scope three days later, on October 23, after reviewing API activity with Shopify. The one comfort in the announcement is the part that was not touched: no payment details, recovery phrases, private keys or wallet passwords were taken.