Keystone Wallet breach exposes customer order records

Keystone, a cryptocurrency hardware wallet maker, disclosed an unauthorised intrusion into its web platform after security engineers detected anomalous activity targeting internal Shopify application programming interfaces. The breach led to the exfiltration of customer records, including names, contact details, shipping addresses, and purchase histories. Keystone later confirmed the perimeter breach in an official incident disclosure posted to its X account.

Beyond the data exposure, the company reported that impersonation scams targeted hardware wallet owners, with fraudsters posing as police officers from the Montreal police department to obtain additional personal information. Keystone also stressed that user cryptographic keys and private seed phrases remained uncompromised, so assets on devices were not immediately at risk of on‑chain theft.

However, leaked residential addresses raise the possibility of wrench attacks, where real‑world threats could attempt extortion or home intrusion to force transfers. The firm did not state a precise timeframe for when records were compromised, leaving the historical scope unclear.

In addition, Keystone’s revised July 2026 privacy policy reiterated a 180‑day automated deletion for customer shipping data, yet some customers who ordered in 2024 reportedly received fraudulent calls, suggesting retention beyond the stated deadline.