# @KeystoneWallet: We detected unauthorized access to our website

Source: https://x.com/KeystoneWallet/status/2114054080754770137
Kiwi News: https://news.kiwistand.com/stories/KeystoneWallet-We-detected-unauthorized-access-to-our-website?index=0x6add2beeebcd33992be8f5a9e6d642f114771b7a18a132ee903fd0a99db6d173f5db85e4
Submitted by misha on 2026-10-24 UTC, 1 upvote, 0 comments

## Summary

Keystone, the crypto hardware wallet maker, disclosed that it detected unauthorized access to its official website on October 20 and confirmed on October 23 that a third party obtained customer shipping information. The exposed data includes names, contact details, shipping addresses, and order details such as items and prices, while payment card or bank details, recovery phrases, private keys, and wallet passwords were not exposed. Keystone says it has blocked access, fixed the vulnerability, opened an investigation, and is emailing affected customers, and it warns that scammers may impersonate the company by phone, text, email, or mail.

## Article

We owe you an apology.

On October 20, we detected unauthorized access to our official website. After verifying API activity with Shopify, we confirmed on October 23 that a third party obtained customer shipping information. You trusted us with those details, and we're sorry we didn't keep them safe.

Exposed: names, contact details, shipping addresses, and order details (items and prices).
Not exposed: payment card or bank details, recovery phrases, private keys, or wallet passwords.

We've blocked access, fixed the vulnerability, opened an investigation, and are emailing affected customers.

Scammers may pose as Keystone by phone, text, email, or mail, offering refunds, replacement devices, or "fixes" for your order or address. None of it is from us.

NEVER share your recovery phrase or private keys, and NEVER enter your recovery phrase into a device you didn't order. We will never ask for them. Don't click links in unexpected messages. Type http://keyst.one yourself.

A detailed report is coming soon.

Until then, trust only our official channels. If anything feels off, email support@keyst.one. We'd rather hear from you than have you take a chance.

Again, we're truly sorry to everyone affected.