Keystone Hardware Wallet detected unauthorized access to its official website on October 20 and confirmed on October 23, after reviewing Shopify API activity, that a third party had obtained customer shipping data. The incident exposed customer names, contact details, shipping addresses and order information, including purchased items and prices. According to the company, payment card and bank details, wallet passwords, private keys and recovery phrases were not compromised. Keystone blocked access, patched the vulnerability, opened an investigation and notified affected customers by email, while warning them about scammers posing as company representatives to offer refunds, replacement devices or assistance.
Source: Read the original article
