Keystone Hardware Wallet Maker Discloses Customer Data Breach

Widespread Data Exposure at Keystone

Hardware wallet manufacturer Keystone confirmed a significant security breach on Friday following detection of suspicious activity earlier in the week. An unauthorized third party successfully gained access to customer data through the company’s website, compromising sensitive personal information including names, contact details, shipping addresses, and order information. In response to the incident, Keystone stated it had immediately blocked unauthorized access, patched the underlying security vulnerability, initiated a formal investigation, and begun systematically notifying all affected customers about the breach and potential risks they may face.

Physical Security Threats Emerge from Leaked Information

While phishing attacks remain a concern with exposed customer data, security researcher Taylor Monahan highlighted a more severe and immediate threat: the publicly leaked residential addresses could enable direct physical attacks against cryptocurrency holders. This warning carries particular weight given alarming crime statistics from the blockchain security sector. According to CertiK, a prominent blockchain security firm, verified physical attacks on crypto holders—commonly referred to as “wrench attacks”—reached 52 confirmed incidents globally during the first half of 2026, representing a dramatic 33% increase from 39 such attacks during the same period in 2025. These attacks typically involve threats, intimidation, or violence used to coerce victims into surrendering their cryptocurrency assets or revealing security credentials.

Data Retention Commitments Called Into Question

The breach has exposed troubling inconsistencies in Keystone’s data management practices and transparency with customers. The company publicly announced in 2023 that it had implemented a strict 180-day data retention limit following security incidents affecting competitors in the hardware wallet manufacturing space. Yet multiple customers have reported receiving breach notification emails despite purchasing their devices more than two years ago, suggesting that actual data retention practices did not align with the company’s public statements and commitments.

One customer, identified online as “OG DEGEN,” reported receiving a fraudulent call from an individual impersonating law enforcement and citing specific personal information traceable to a Keystone device purchased in 2024. The caller allegedly attempted to convince the customer that their private keys had been compromised and directed them toward a phishing link presented as a security solution. Another customer similarly received a breach notification despite purchasing their device over two years prior, raising further questions about data retention. Keystone has declined to disclose how many customers were affected by the breach, has not provided clarity on the apparent violation of its retention policy, and did not respond to inquiries seeking explanation.

This incident underscores the importance of implementing robust security practices and maintaining transparent data governance among hardware wallet providers, which serve as critical custodial infrastructure for the broader cryptocurrency ecosystem and its users.

Source: Keystone, via Cointelegraph. Not financial advice.