Keystone: shop breach exposed customer names and shipping addresses
25 Oct 2026: Keystone says unauthorized access to its website was detected on 20 Oct. On 23 Oct, after reviewing Shopify API activity, it confirmed that customer names, contact details, shipping addresses, and order details were taken.
Payment data, bank details, recovery phrases, private keys, and wallet passwords were not taken. Keystone says it blocked the access and is emailing affected customers. A fuller report is promised. Research snapshot from Keystone.
369 take
Expect fake replacement devices and refund messages. Never type a seed into a website, and never type it into a device you did not order.
Sources