Monitor this situation.

Unsubscribe anytime.

[SITUATION] · [ACTIVE] · [TECHNOLOGY]

2 clusters · 29 sources · 3 days · First seen 4 days ago · Last updated about 17 hours ago

Keystone hardware wallet security breach

Overview

Keystone, a manufacturer of cryptocurrency hardware wallets, disclosed a significant security breach involving its Shopify-powered online store. The unauthorized access, detected on October 20, 2026, exposed approximately 25,964 purchase records and 12,873 incomplete checkout records, including customer names, contact details, and shipping addresses.

A critical aspect of the breach involved the theft of a WebAuth device-authentication key used to verify hardware authenticity. Because this key is engraved into the hardware and cannot be modified, the theft created a risk that counterfeit or cloned devices could pass official verification checks.

In response, Keystone announced it would destroy 18,835 unsold hardware wallet units from its current inventory that rely on the compromised key and suspended all website shipments until new devices with a replacement key could be produced. While the company stated that private keys, recovery phrases, and banking information were not compromised, the incident raised concerns regarding data retention, as some customers reported receiving breach notifications for orders placed over two years ago.

Entities

Keystone · Shopify · Taylor Monahan · WebAuth · Hong Kong

Claims

What the coverage asserts, and how many sources carry each claim.

[● 2 SOURCES] Keystone will destroy 18,835 unsold hardware wallets. cryptocompass.com · decrypt.co
[● 2 SOURCES] Keystone has suspended all shipments from its website. cryptocompass.com · decrypt.co
[● 2 SOURCES] The security breach was detected on October 20, 2026. cryptocompass.com · decrypt.co
[● 2 SOURCES] The breach exposed 25,964 buyer records from 2024 to 2026. cryptocompass.com · decrypt.co
[● 2 SOURCES] Exposed customer data includes names, contact details, and shipping addresses. cryptocompass.com · decrypt.co
[● 2 SOURCES] Keystone claims that recovery phrases and private keys were not exposed. cryptocompass.com · decrypt.co
[○ 1 SOURCE] The hack occurred via a vulnerability in a third-party data tracking tool. cryptocompass.com
[○ 1 SOURCE] An attacker obtained a WebAuth key used to verify device authenticity. decrypt.co

Timeline

about 17 hours ago

[TECHNOLOGY] 4 sources
Keystone to destroy 18,835 hardware wallets following security breach
Keystone is destroying 18,835 unsold hardware wallets and suspending shipments after a hack exposed an authenticity key and over 25,000 customer records.
4 days ago

[TECHNOLOGY] 26 sources
Keystone hardware wallet manufacturer suffers data breach and key theft
Keystone hardware wallet maker faces a major breach exposing 25,964 customer records and a device authentication key, forcing the destruction of 18,835 unsold units to prevent counterfeit risks.

Sources

ambcrypto.com · bitcoinbazis.hu · blockcast.it · blockonomi.com · blocktempo.com · blockzeit.com · btc-echo.de · btcwires.com · canceractive.com · chemanalyst.com · criptonoticias.com.br · crypto-insiders.nl · cryptobreaking.com · cryptobriefing.com · cryptopolitan.com · decrypt.co · ethnews.com · geeklando.com.br · gizmodo.com · ibj.org · infoguerra.com.br · kriptoworld.hu · neweconomy.jp · news.bitcoin.com · rande-academy.cz · spacemoney.com.br · tekedia.com · trendingtopics.at · tronweekly.com