Keystone discloses website breach exposing hardware wallet buyers' shipping addresses

Crypto hardware wallet maker Keystone confirmed on Saturday that an unauthorized third party accessed customer shipping information via its API earlier in the week. Exposed data includes names, contact details, shipping addresses and order details. The company has blocked access, fixed the vulnerability and is notifying affected customers. Security researcher Taylor Monahan warned the leak could expose users to physical attacks, while blockchain security firm CertiK reported a 33% increase in 'wrench attacks' globally in the first half of 2026.