Be prepared

[snowpega]

One after another. Are we really safe in the crypto space? As with the passage of time, technology and ways are getting more advanced, and bad actors are taking advantage of it to harm every possible condition, situation or person. Where are we actually safe? Hardware wallets are getting compromised, and trusting software wallets is even harder these days. Even those who are giving their 100% to stay safe in the crypto space are also facing losses.

I honestly don't click any untrusted links or even not open i don't open any untrusted emails. As with the passage of time, we have to understand the nuance of this matter and should think many times before trusting anything in the crypto space. What do you guys think? How can the crypto space become safe from these kinds of frauds and scams?

[Rruchi man]

Stand your ground pips, a new wave of scam emails incoming.
Since keystone data got breached many people's information already got leaked, there is no coming back from that one.

Your email address will likely start receiving messages well constructed in a way that the keystone Devs will want to safe your ass from getting hacked, scammed or losing your coins.

Do not fall for it.

At this point, it will be a really good thing if we learn the habit of also following up with the makers of the hardware wallet that we have so that we can see updates like this as soon as they come. Many owners of that hardware wallet who are not also members of this forum and not following up with them on their socials will still fall victims to this.

Maybe as a way to help, the company should send email notifications first to people who use their wallet so they are aware of this and expect to ignore such emails from the hackers when they later receive it.

[KiaKia]

Thank you for sharing here.
Again, does it mean that only those who are using keystone that would receive the scam mail or what?
Because as I know, those who are not using wallet that doesn't associated with any mail will never receive any scam mail. Of course, we know as things works nowadays since scammers are putting much efforts to scam people around we should all be at alert in regards to the scheme.

Scammers won't mind adding extra emails to be honest, if they can find your email address online they can add it upon so don't expect that they will send scam emails to people whose information got leaked via keystone.

I remember receiving few scam emails from Ledger and I don't own any Ledger products at all, how are they able to do it? Maybe they guessed out my email address or they find somehow using the internet.

I just ignore the mail all together, it's better if everyone will do the same, there is no reason why anyone should respond or react to such mails and make sure you don't click any links.

[moneystery]

If it's a phishing email or phone call, it might be avoidable. What's really concerning is the information about home addresses, that's more worrying because with the rise in wrench attack cases lately, if that information gets into the hands of criminals, it could put a lot of people in danger, especially if they live in countries where wrench attacks are more common, like France; it could be even worse there.

I think users of Keystone who have previously shared their home addresses need to be extra careful because no one can guarantee whether they're completely safe or not.

[Obim34]

At this point, it will be a really good thing if we learn the habit of also following up with the makers of the hardware wallet that we have so that we can see updates like this as soon as they come. Many owners of that hardware wallet who are not also members of this forum and not following up with them on their socials will still fall victims to this.

Nothing new compared to how phishing attacks happen, and what we've been hearing about.

Personal information should be confidential to the owners, anybody reckless enough to disclose their secret information (phrases or keys) takes the blame.

Keystone will send emails to all affected customers, It's compulsory to warn them about the attacks and what could happen.

[Hypnotizer]

-snip

No, not every Keystone owner is rich. They can't just leave their house or leave the country. They might stay somewhere else for the time being, but there is no deadline, so how long do they have to stay away?

My point is that any victim especially in those countries should prioritize physical security together with the preparedness for possible phishing attacks. It isn’t necessary for them to just leave the house if they don’t have an option to do so, they can just employ a security guard or keep security dogs.

They only have one option, to sell the house or, if renting, change the place and move out. This has already happened to a person in France, I think, and the other person who bought the place was wrench attacked at least twice, got nothing, and was caught. The first time, I think a dog prevented it.

So the new owners of the house have to face the attack because the old owner was a Bitcoiner and his data was leaked.

https://news.bitcoin.com/crypto-news/french-couple-moves-to-sell-home-after-3-crypto-linked-invasions/

I think it would be a better practice if someone selling or renting that kind of property will inform the new tenant about this concern for their security also.

 Though it might scare off some potential buyers, I deem it wrong to sell a building in this scenario without informing the buyer of the security concerns.

[Just Say]

Saw some home addresses were also part of what got leaked..

For people that ordered the keystone wallet  and they suspect their home address might be leak and they live in countries where wrench attacks are kinda common like France, it’d probably be better if they change their location and move to a more safer place or better still improve the security of their home to prepare for any possible attacks especially if their stash is big..

Phishing emails are going to be the most common after this leak, but that doesn’t rule out the possibility of Wrench attacks.

So be prepared for that also.. and Stay safe.

Already we see that hardware wallet maker Keystone has confirmed a security breach in which customers' names, home addresses and details of the cryptocurrencies they purchased were leaked, causing concern among many. So it is certain that this could raise concerns about phishing scams and physical threats against cryptocurrency holders.

See, phishing emails will become more common as a result of this information leak and wrench attacks will increase as attackers can misuse this personal information of customers as you can easily understand that names and home addresses can help criminals identify hardware wallet buyers. Earlier, the data of Shipmonk, one of Trezor shipping service providers, was also leaked. In fact it surprises us all that hardware wallets are the most attacked by hackers this year and they are stealing holders' crypto assets such as many Bitcoins stolen from cold cards and many assets stolen from ledger hardware wallets.

[Mrbluntzy]

At least they were reasonable enough to release a public information about it unlike some companies that will conceal the information from their customers and when the scammers starts messaging customers, the person will start wondering how their email address got leaked and a platforms they don't even have accounts on will start mailing them, worst case in that some persons will fall victim. So many hacks have happened this year and next year could be worse, we have to be more security conscious. Buying of hardware wallet should not even require for a person full details, delivery address is okay, as for customers name, it can be replaced with special code that will be identified between the seller and the buyer.

[Stalker22]

~
I remember receiving few scam emails from Ledger and I don't own any Ledger products at all, how are they able to do it? Maybe they guessed out my email address or they find somehow using the internet.

Thats probably because your email address was exposed in some ancient forum data dump or some unknown website breach back in the day.  These things happen much more frequently than you think.  Some companies even reveal they have been breached at the time of the attack, while others… try not to embarrass themselves and hope nobody finds out until your inbox fills with targeted phishing spam three months later.

There is a website you can go to see if your email address has been part of any of these breaches.
https://haveibeenpwned.com/

The tool is safe and there is no evidence that it collects or misuses your data – but for your own peace of mind, dont run a check on any email addresses you are not happy to divulge.  Better safe than sorry!

[laijsica]

Not only in emails, you may receive phone calls from numbers that seem strange to you. I have received several phone calls that made me suspicious and ignored them.

Later I could not find the existence of that number anywhere in the phone call list or WhatsApp call list. Such incidents have happened to me several times. I have heard about hacking through emails and have taken precautions but this new issue of phone calls has given rise to new concerns in me.

[Patrol69]

Fraudsters are trying to cheat in new ways and they are succeeding in cheating in many ways. Now after hearing such news, I feel afraid to open my mail, it has become a challenging issue to distinguish which one is fake and which one is real. There is no guarantee that someone cheated today, but tomorrow I will not cheat with you, but it is a good decision to bring such a matter to the fore so that those who do not know about this matter will be aware and will think twice before opening such spam mail.

[MisFoxie]

Since they have got your home address and contact information such as your phone number and email I think they may try to scam you through email (like: Phishing email, account recovery, email spoofing .....) or since they have your address they may send you intimidating offers through delivery.

It is also possible that they can now find your social media through your address and name and harass you. They can hack your social media hack your Wifi, hack your device and do many other things. I didn't say these things to scare you only to warn you. I hope you will stay safe.

[Franklyn-wood]

If it's a phishing email or phone call, it might be avoidable. What's really concerning is the information about home addresses, that's more worrying because with the rise in wrench attack cases lately, if that information gets into the hands of criminals, it could put a lot of people in danger, especially if they live in countries where wrench attacks are more common, like France; it could be even worse there.

I think users of Keystone who have previously shared their home addresses need to be extra careful because no one can guarantee whether they're completely safe or not.

Keystone are really trying to have the courage to inform there client about the attack on there site, this is an hight of sincerely and it will help all the client on the platform to be more careful and get ready for any thing that could come up after the information is given.
All the email attached to this keystone is are all at riskand there owners should be careful this time because of this leak.

[Hamza2424]

Though we might not easily fall victim to these scam attempts since we are already well informed here, the same cannot be said for others who may not be aware of these risks.

And the numbers speak for themselves.

I am sure the numbers for 2026 and the years onwards are going to be higher than this because a lot of breaches have happened in 2026 alone that we never heard about on this scale in 2025. So I am sure these phishing attacks are not just going to increase, but these hackers and scammers are going to advance their attacks too.

Either they will increase wrench attacks, which is true, or they will target individuals in person to find out who they are and what they can take from them. A lot of syndicates have been exposed yet not caught, possibly because some corrupt officials in certain authorities are also taking bribes.

[Myleschetty]

This is one of the reason we should not use our genuine information when buying wallet or doing anything that have to do with exchange and hardware wallet which are the main platform experiencing this type of data breach because once the personal data (emails, names, shipping addresses, etc.) leaks the phishing attack with the inclusion of physical attack is almost inevitable.

Anyway be using the wallet should never

1. Never share your seed phrase with anyone, for any reason.
2. Ignore unsolicited emails, letters, and phone calls claiming to be from Keystone wallet support. 
3. If you receive any suspicious link, don’t click it.

[salad daging]

We've received a lot of phishing email attacks, and we know now how to anticipate that there may be new ways that they do it-at least I'll never click on a previously unfamiliar link.
The wave of phishing attacks will not be done now, the hackers who have customer data are preparing for it, if they do now everyone knows and is aware of it, they are waiting for their customers to be caught off guard.

Even funnier is this tweet.

[Mr_Brilliant$]

The breach has happen. The way you constructed your message seems like we should treat every message from Keystone as scam. It should have been reframed as verify every message from Keystone. Whether you like it or not, you might be contacted by Keystone over security issues. With this type of message, people will not even read the message. Since every messages as being assumed that it is scam.
What Should have been said is that verify all messages from them. Some might be genuine. You know how Keystone sends messages before. Understand it. Little details matters. That way, you can tell which is fake and real.

[Slow death]

In the past say, about 10 years ago while scams involving emails or phone calls were certainly a problem, people could generally avoid falling for them. Today, however, the implementation of KYC procedures has made things much more complicated. If a hacker manages to obtain data from an exchange where users have completed KYC, they might discover, for instance, that a specific individual held 3 BTC there.

After stealing the funds and the associated personal data, the hacker can launch a targeted campaign; when they call the victim, they will already possess all of the victim's private information such as their full name, the full names of their parents, and their home address. Consequently, the victim is unlikely to remain calm; fearing that the perpetrator might show up at their home and inflict harm far worse than mere psychological threats, they are likely to give in to the hacker's demands.

[uchegod-21]

I believe that by now, everyone who gets messages about offers or any technical issues is suppose to confirm first from the official website before taking any action. They don't need to be into crypto alone to know that this is a common knowledge everyone should have whether they are dealing with crypto or fiat.

Thanks op for bring this to the knowledge of those who are likely to get affected by this data breach, this information is enough for anyone to be careful, except they are just dumb  

The breach has happen. The way you constructed your message seems like we should treat every message from Keystone as scam.

Op is not wrong with his choice of words. There is nothing wrong with treating every message from keystone as a potential scam for now. Especially now that keystone has made everyone to be aware that there was a breach and that everyone should be careful. If all messages from them are considered suspicious, It will motivate the users to verify if the message or call is real. It doesn't mean that the message is definitely a scam itself.

[Juse14]

One after another. Are we really safe in the crypto space? As with the passage of time, technology and ways are getting more advanced, and bad actors are taking advantage of it to harm every possible condition, situation or person. Where are we actually safe? Hardware wallets are getting compromised, and trusting software wallets is even harder these days. Even those who are giving their 100% to stay safe in the crypto space are also facing losses.

Still clear! You don't need to worry because there are still many secure software or hardware wallets that will not be affected by this kind of news, vigilance is very important especially looking at the latest news do not miss it, the most important thing is that you can secure assets in wallets that are in use even multisig there is no disability.

Do not let this news in more By Your response or whoever it is, the rest just monitor it because at times like this is the hackers take advantage of the opportunity of people who panic.