Cryptopotato Keystone Wallet Data Breach Exposes Customer Information
Article Content
- •Keystone Wallet disclosed a data breach affecting customer shipping information.
- •Unauthorized access occurred on October 20, with confirmation on October 24.
- •No sensitive financial data or private keys were compromised, but phishing risks are heightened.
Keystone Wallet reported a data breach on October 24, 2026, after unauthorized access to its website exposed customer names, shipping addresses, and purchase details. The breach occurred on October 20, when Keystone detected suspicious API activity on Shopify, leading to the confirmation of compromised customer data. However, the company stated that sensitive information such as recovery phrases, private keys, and payment information were not affected. This incident adds to the ongoing security challenges faced by hardware wallet manufacturers, including Ledger and Trezor, which have also reported breaches this year. Keystone has since patched the vulnerability and is notifying affected customers. The exposure of customer data raises concerns about targeted phishing and social-engineering attacks.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Following this threat?
Track Coldcard in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What customer information was exposed?
How did the breach occur?
What should affected customers do?
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…