Keystone will destroy 18,835 unsold hardware wallets and suspend shipments after an attacker obtained the permanent factory key used to authenticate its devices. The breach, detected on October 20, also affected 25,964 buyer records containing names, contact details and shipping addresses from 2024 to 2026. The company says recovery phrases and private keys were not compromised and that devices delivered before October 20 are unaffected. Orders will move to a preorder basis until devices with a new key are produced, while Keystone has cut its customer-data retention period from 180 to 90 days.
Source: Read the original article


