Keystone detected unauthorized access to its official website on October 20, 2026, exploiting a flaw in a third-party data tracking tool, and blocked access after three days of investigations. The intruder obtained 25,964 purchase records and 12,873 abandoned carts containing names, contact details, delivery addresses and order information from 2024 to 2026. Private keys, recovery phrases, banking data and wallet passwords were not compromised, so customer funds are not at risk. However, the stolen WebAuth key used to authenticate devices could be used to produce clones; Keystone is therefore destroying 18,835 devices fitted with the old key, suspending shipments and switching sales to preorders until new models are produced.
Source: Read the original article
