theblock.coarticleKeystone customers say breach exposed data the hardware wallet maker promised to delete
Keystone, a hardware wallet maker, disclosed on 25 October 2026 that an attacker accessed its Shopify-based store, detected 20 October and confirmed 23 October. Customer names, contact details, shipping addresses and order details were taken. Keystone says no payment data, recovery phrases or keys were exposed. Customers on X say their data was held despite a 180-day deletion pledge. The piece lists 2026 leaks at Trezor, SafePal and Ledger.
TL;DR Reports Keystone's Shopify store breach that exposed customer shipping data, and customer claims that it broke a 180-day deletion promise.
Organisations named here
- SafePal
- Trezor
Technologies named here
- Shopify
- keystone
- Ledger
- Keystone hardware wallet store (Shopify-based online store, Keystone)
Concepts named here
- Customer data breach
- Data retention and deletion pledge
- Hardware wallet vendor data leaks
Related in Threat Intel
huntress.comwriteupReverse Engineering the Six Stages of MacSync Stealer and RAT
huntress.comwriteupAI-Coded Malware | Analyzing Vibe-Coded AD Enumeration | Huntress
blog.talosintelligence.comtoolIntroducing CAIRN: Frontier tracking for AI-integrated malware (Cisco Talos)
huntress.comwriteup