Keystone has warned customers about phishing scams after unauthorized access to its website exposed shipping addresses, contact details and order records. The hardware-wallet maker confirmed the incident on October 24 and urged affected users to be cautious of messages from people claiming to represent its support team.
Keystone said it detected unauthorized access on October 20 and confirmed the exposure three days later. The company linked the incident to API activity involving Shopify. It added that payment details, recovery phrases, private keys and wallet passwords were not compromised.
Keystone Warns Customers About Phishing Attempts
The exposed information included customer names, phone numbers, shipping addresses, purchased products and prices. Scammers could use these details to send targeted messages about deliveries, refunds or replacement devices.
Related: Kraken Reverses Monero Withdrawal Questionnaires After Privacy Backlash
Keystone said it blocked the unauthorized access, fixed the vulnerability and began notifying affected customers. It also advised users to avoid unexpected links and access its website directly.
The company stressed that its support team would never ask customers for recovery phrases or private keys. In a follow-up reply, Keystone said it would publish a detailed report “in the coming days.”
Trezor and SafePal Also Reported Data Exposures
Other hardware-wallet providers have faced similar incidents. Trezor reported a shipping-provider breach affecting 80,689 customers, while SafePal disclosed a tracking plug-in flaw that affected approximately 39,798 customers.
Those cases, like Keystone’s, exposed customer information that could be used in targeted phishing attempts.
Related: Argentina Judge Drops LIBRA Fraud Probe Into Milei and Davis
Please note, this site provides content for entertainment purposes only and does not offer financial advice. Read more here