Keystone confirmed that it encountered a security incident: approximately 26,000 customer information and device authentication keys were leaked

According to a statement from Keystone Hardware Wallet, its official website was breached on October 20 due to a vulnerability in third-party monitoring tools, resulting in the acquisition of approximately 25,964 purchase records containing personal information, 12,873 unpaid checkout records, and device WebAuth authentication keys. Mnemonic phrases, private keys, and payment information were not affected.

Keystone will destroy 18,835 devices containing old keys from its inventory, suspend shipments from the official website, and switch to pre-sales, while reminding users that there is no need to transfer assets and to be wary of scams such as "recalls."