Keystone says website breach exposed hardware wallet buyers’ addresses
A security researcher warned that the leaked shipping details could expose crypto holders to targeted scams and physical attacks.
Crypto hardware wallet maker Keystone has disclosed a website security breach that exposed customer information to attackers, raising concerns about targeted scams and physical attacks.
Keystone said Saturday that it detected suspicious activity earlier in the week and confirmed Friday, after reviewing API activity with Shopify, that an unauthorized third party had accessed customer shipping information. This included names, contact details, shipping addresses and other order details, such as items bought.
“We’ve blocked access, fixed the vulnerability, opened an investigation, and are emailing affected customers,” said the company.
