KEYSTONE FOUND THE BREACH OCTOBER 20 — HARDWARE WALLET BUYERS’ NAMES, HOME ADDRESSES AND ORDER VALUES OUT — NO CUSTOMER COUNT, REPORT “COMING SOON”
On October 24, 2026, at 17:59 UTC, hardware wallet maker Keystone posted on X: "We owe you an apology." It said that on October 20 it "detected unauthorized access to our official website," and after checking API activity with Shopify it "confirmed on October 23 that a third party obtained customer shipping information." Exposed, per Keystone: names, contact details, shipping addresses and order details, meaning items and prices. Not exposed: payment card or bank details, recovery phrases, private keys or wallet passwords.
Your keys are safe. That is the line Keystone leads with, and as far as anyone can tell it is true. But the order records of a hardware wallet store are a list of people who hold their own keys, with a home address and a price next to each name. A thief does not need your seed to want that list. He needs to know where you live. The public list of physical attacks on crypto holders that Mempolitics counted on Oct. 17, 2026 held 701 entries.
Then the timeline. Four days passed between detection and the public post. On October 23 at 23:18 UTC, about 19 hours before Keystone posted, an X user posting as @PEPE_Whale69 wrote that a caller from a spoofed Montreal police (SPVM) number tried to work him and asked whether "Amazon, eBay, or Keystone" meant anything to him. That is his account, not a confirmed link to this breach. Keystone has not said how many customers were hit or how the access happened. It says it is emailing affected customers and that "A detailed report is coming soon."
Assume the address is out. Keystone says it will never ask for a recovery phrase, and that scammers may pose as Keystone by phone, text, email or mail with refunds, replacement devices or "fixes." Never type a seed into a device you did not order. And ask whether a wallet seller needs your home address at all. A pickup point or a work address keeps your name off the next list. At the time of this writing, bitcoin was $80,765.