Hardware wallet Keystone confirms unauthorized access to its official website, with customer names and shipping information leaked.

BlockBeats news, October 25: Hardware wallet manufacturer Keystone issued an apology, stating that it discovered unauthorized access to its official website on October 20, and after verifying API activity with Shopify, confirmed on October 23 that a third party had obtained customer shipping information. The incident involved customer names, contact details, shipping addresses, and order details, including product names and prices, but did not involve bank card or bank account information, mnemonic phrases, private keys, or wallet passwords.

Keystone stated that it has blocked the relevant unauthorized access, fixed the vulnerability, and launched an investigation, while notifying affected customers via email. The company also plans to release a detailed investigation report soon and reminds users to trust only official channels during this period.

Keystone warned that scammers may impersonate the official team via phone calls, text messages, emails, or physical mail, using pretexts such as refunds, device replacements, or resolving order and address issues to carry out fraud. Users must never disclose mnemonic phrases or private keys to anyone, and should not enter mnemonic phrases on devices they did not personally order; for unsolicited messages received, do not click on any links and instead type the official website address directly to visit. If in doubt, contact customer service through official channels.