Skip to content
EVENT / TOPICHistorical

Keystone website breach exposes hardware wallet buyers' addresses

1 reports1 sources10/26/2026 updated

Current overview (not historical)

AI overview

Keystone confirmed that an unauthorized third party accessed customer names, contact details, shipping addresses, and order details via an API vulnerability. The company has blocked access and notified affected users, warning that exposed information could be used for phishing attacks and physical threats. Keystone also stated it has shortened customer data retention to 180 days.

Written with AI from the reporting · updated 10/26/2026

Latest developmentOct 26, 10:24
Keystone discloses website breach exposing hardware wallet buyers' shipping addresses
Explore the timeline, relations and evidence
Expand the detailed fact route and sources

Story route

A station-by-station route from the first public evidence onward; every station carries its own evidence and uncertainty.

  1. 1Unclassified fact stationOct 26, 00:00recorded Oct 26, 10:35single sourcerevised

    Keystone 网站安全漏洞暴露买家地址

    Read original source ↗ CointelegraphReplay this moment in the explorer
    Evidence & revisions · 1 source records
    Subject：
    keystone
    Action：
    网站安全漏洞暴露客户信息
    Object：
    客户姓名、联系方式、收货地址及订单详情
    Occurred (fact side)：
    Oct 26, 00:00
    Cointelegraph ↗Report pageRevision 2 · currently revised
    Published (valid side)：
    Oct 26, 10:24
    First seen (known side)：
    Oct 26, 10:35
    Fact stationSingle source · one-sided claimRevised

    Copy may have been revised later; time replay is bounded. Layer labels group reading only, not causation between layers.

Uncertainty marks flag where to check the sources; they are not proven causation.

Report timeline

Explore every side through dated source reports.

Oct 26
  1. CointelegraphRelated fact: single sourceSource report revised
    Keystone discloses website breach exposing hardware wallet buyers' shipping addresses

    Report first recorded Oct 26, 10:35

    Crypto hardware wallet maker Keystone confirmed on Saturday that an unauthorized third party accessed customer shipping information via its API earlier in the week. Exposed data includes names, contact details, shipping addresses and order details. The company has blocked access, fixed the vulnerability and is notifying affected customers. Security researcher Taylor Monahan warned the leak could expose users to physical attacks, while blockchain security firm CertiK reported a 33% increase in 'wrench attacks' globally in the first half of 2026.

    Read original source ↗

Event discussion

Reader opinions are hosted on GitHub Discussions; posting requires a GitHub account. Comments are not verified facts.

Open GitHub Discussions