Keystone customers data hacked

[Karl_3000]

Keystone which is a hardware wallet company, said that their customers data has been hacked.

This is what what posted by the hardware wallet company on X: https://x.com/KeystoneWallet/status/2114054080754770137

We owe you an apology.
On October 20, we detected unauthorized access to our official website. After verifying API activity with Shopify, we confirmed on October 23 that a third party obtained customer shipping information. You trusted us with those details, and we're sorry we didn't keep them safe.
Exposed: names, contact details, shipping addresses, and order details (items and prices).
Not exposed: payment card or bank details, recovery phrases, private keys, or wallet passwords.
We've blocked access, fixed the vulnerability, opened an investigation, and are emailing affected customers.
Scammers may pose as Keystone by phone, text, email, or mail, offering refunds, replacement devices, or "fixes" for your order or address. None of it is from us.

NEVER share your recovery phrase or private keys, and NEVER enter your recovery phrase into a device you didn't order. We will never ask for them. Don't click links in unexpected messages. Type keyst.one yourself.
A detailed report is coming soon.
Until then, trust only our official channels. If anything feels off, email support@keyst.one. We'd rather hear from you than have you take a chance.
Again, we're truly sorry to everyone affected.

If you are using Keystone as a Nigerian, be careful of phishing attacks. Any email received to input your seed phrase somewhere online like a site or link telling you to download something, just ignore the links.

[Decimetre]

One thing I think about sometimes is that these companies are aware that several attackers are actually engaging in all these activities, they don't seem to be very preventive in their approach of data security. It's always an apology on apology. Many users are getting fed up with these hardware wallets. The good thing is that the private keys are not yet reported to be leaked and the seed phrases too. My advice will only be that anyone using this wallet should move their funds with immediate effect.

One should always be careful about the links he click on especially when received through emails or texts because of situations like this. When they can not access your funds, They steal your information from trusted companies and come back to hack more by sending phishing links.

[Jubilee58]

I think the safety of your wallet likes between you, and the company. As a company, customers information, and wallet security should be your priority because giving excuses of customers account hack, and attack will is a sign that you are very incapable of keeping customers details safe, and therefore likely to loose their trust, and confidence in doing any business transactions with you.
The keystone company should be aware that scammers are roaming on the Internet targeting people's account, and they are also improving on their tricks , so as a company you should also improve on your security measures so that they won't get access to customers wallet, and information.

As a customer, you also have your own role to play. Sometimes, the problem might not only be coming from the company alone, Some customers can compromise their wallet details, possibly by exposing them to unauthorize person or a scammer, and they will take advantage of such information. So it is necessary as a keystone customer to keep your security details intact, and safe to ensure account or wallet safety.

[The Founding Titan]

One thing I think about sometimes is that these companies are aware that several attackers are actually engaging in all these activities, they don't seem to be very preventive in their approach of data security. It's always an apology on apology. Many users are getting fed up with these hardware wallets.

This is actually poor sighted, you can make as much improvements as possible but until a hack actually happens you won't know where is most vulnerable in your system, this is why most companies pay good money for ethical hackers to look for vulnerabilities in their systems so they can work on them.
Hackers are improving too quickly especially with AI, it's much easier now to find loopholes in websites, apps and even hardware devices and hackers are taking advantage of this as much as they can, that's why we've seen this much reports about all these hacks especially in 2026.

[Decimetre]

One thing I think about sometimes is that these companies are aware that several attackers are actually engaging in all these activities, they don't seem to be very preventive in their approach of data security. It's always an apology on apology. Many users are getting fed up with these hardware wallets.

This is actually poor sighted, you can make as much improvements as possible but until a hack actually happens you won't know where is most vulnerable in your system, this is why most companies pay good money for ethical hackers to look for vulnerabilities in their systems so they can work on them.
Hackers are improving too quickly especially with AI, it's much easier now to find loopholes in websites, apps and even hardware devices and hackers are taking advantage of this as much as they can, that's why we've seen this much reports about all these hacks especially in 2026.

The way it should be. I have also seen in this forum  where we have bounties https://bitcointalk.org/sbounties.php aimed at finding looking for possible loopholes that can lead to a hack or data breach in the forum. This is there and open for public access. These companies too can take their security strategies to this level of awareness, good hackers will help fine most of this loopholes for the bounty sake. They must not wait to discover from bad actors (hackers) who will get the public information for their selfish interests.

Users should be thankful too that their funds are safe, so the company can fix things and update the security framework knowing fully well that Technology is getting more complicated and develope their systems accordingly.

[Charles-Tim]

Users should be thankful too that their funds are safe, so the company can fix things and update the security framework knowing fully well that Technology is getting more complicated and develope their systems accordingly.

Or Keystone should be thankful that people are buying their hardware wallet? This is about customers information that is breached and not about breach of security. Keystone only posted that for people not to be panic.

What if someone does not know about this and fell for phishing attack?
What if someone is later physically attacked to the point that his life is at stake?

These two have happened before several times just because of the hardware wallet companies not concerned about their users privacy.

[Obim34]

Too many vulnerabilities in hardware wallets, three major cases this year.

What if someone does not know about this and fell for phishing attack?
What if someone is later physically attacked to the point that his life is at stake?

Without knowing about the privacy breach, one ought to be careful with sensitive information.
For the second case, it's hard to know how to deal with it, if the flaws are already exploited.

[Cryptomultiplier]

When I saw the name 'keystone,' I was thinking it was the bank because one of my banker friends posted about similar cases of the rise in phishing attacks and hacks online and warned about clicking on just about any links we see. So my thoughts went there first, until I read through and learnt it was about hardware wallet.

Well, the simple basic tips I can prefer is to avoid typing seed phrases online or storing them on our devices.
Learn to ignore most unrecognized emails or texts or calls about the breach.
Lastly, don't accept replacement devices that were sent to you if you didn't make a request.

Infact it's better to avoid anything as pertains to keystone right now because their service is no longer trusted.

[MisFoxie]

The amount of crypto hacks and data breaches happening this year I don't think anything like this has happened in previous year. Probably the criminals have been able to carry out so many activities this year by using AI. It is possible that next year we will see even more crypto hacks and breaches than this.

TrmLabs show that around 207 hacks happen this year (the article was published July 01 2026) which is lot higher than previous years. Source

[EstherBtc]

Keystone which is a hardware wallet company, said that their customers data has been hacked.

This is what what posted by the hardware wallet company on X: https://x.com/KeystoneWallet/status/2114054080754770137

We owe you an apology.
On October 20, we detected unauthorized access to our official website. After verifying API activity with Shopify, we confirmed on October 23 that a third party obtained customer shipping information. You trusted us with those details, and we're sorry we didn't keep them safe.
Exposed: names, contact details, shipping addresses, and order details (items and prices).
Not exposed: payment card or bank details, recovery phrases, private keys, or wallet passwords.
We've blocked access, fixed the vulnerability, opened an investigation, and are emailing affected customers.
Scammers may pose as Keystone by phone, text, email, or mail, offering refunds, replacement devices, or "fixes" for your order or address. None of it is from us.

NEVER share your recovery phrase or private keys, and NEVER enter your recovery phrase into a device you didn't order. We will never ask for them. Don't click links in unexpected messages. Type keyst.one yourself.
A detailed report is coming soon.
Until then, trust only our official channels. If anything feels off, email support@keyst.one. We'd rather hear from you than have you take a chance.
Again, we're truly sorry to everyone affected.

If you are using Keystone as a Nigerian, be careful of phishing attacks. Any email received to input your seed phrase somewhere online like a site or link telling you to download something, just ignore the links.

This is the reason everybody whether literate or not should have basic cyber security knowledge, the rate at which cyber attacks and hacks are happening it's alarming. Even the most knowledgeable tech wise are becoming victims.

[Son Of Blockchain (SOB)]

The amount of crypto hacks and data breaches happening this year I don't think anything like this has happened in previous year. Probably the criminals have been able to carry out so many activities this year by using AI. It is possible that next year we will see even more crypto hacks and breaches than this.

TrmLabs show that around 207 hacks happen this year (the article was published July 01 2026) which is lot higher than previous years. Source

I expected other companies relating with Crypto/Bitcoin to learn from the experience of other who got hacked but it seems some where too confidence of their security instead of verifying for loopholes, they shouldn’t just assumed they're safe cause they've bern audited in the past, they should've updated their security.
 Well am not wishing next year to be worst but any company that fail to update their security would face similar situations. Keystone better take quick actions cause merely saying sorry won't solve the problem.

[PremiumcryptoHub]

The amount of crypto hacks and data breaches happening this year I don't think anything like this has happened in previous year. Probably the criminals have been able to carry out so many activities this year by using AI. It is possible that next year we will see even more crypto hacks and breaches than this.

TrmLabs show that around 207 hacks happen this year (the article was published July 01 2026) which is lot higher than previous years. Source

Yes, the number of crypto hacks and data breaches that have occurred this year may not have happened in any other year because you notice that this year there have already been two hardware wallet hacks where millions of dollars worth of bitcoins or other crypt currencies have already gone into the hands of hackers, also hackers pocketing the assets from various exchanges.

However it now appears that hardware maker Keystone has reported that its customers' sensitive data has been leaked, but still the recovery phrase, the private keys and wallet passwords were not leaked which makes it conceivable that the holders' crypts may still be somewhat secure, but it seems to me that users of this hardware wallet maker, KeyStone, whose sensitive information was leaked, may be physically vulnerable to attack. So we Nigerians must be careful of this phishing attack and never share the recovery phrase or private key to keep bitcoin holdings safe.

[Yablee0]

When I saw the name 'keystone,' I was thinking it was the bank because one of my banker friends posted about similar cases of the rise in phishing attacks and hacks online and warned about clicking on just about any links we see. So my thoughts went there first, until I read through and learnt it was about hardware wallet.

Lol, when I first saw the name keystone I also thought it was my local bank because I do bank with them.

Nice update. We need to be very careful with the way we react or respond to some links, website etc that we aren't that familiar with mostly this period. Because with the rate of hacks that has been recorded in just this year alone is something I can't explain. Perhaps, I will consider this year the most highest case's of hacks in recent time. However, I am beginning to lost trust on most of these hardware wallet companies because it's becoming more obvious that our information is no longer saved with them. Thus, they shouldn't fold hands and wait for which platform is next, adequate action should be taken to ensure of a lasting solution to this unresting situation we are experiencing.

[Moreno233]

I saw a post on this in the general board earlier today and what is certain about this breach is that they will try to use those information Junsolicited messages through emails and other means with a bid to trying to scam them. So, people should  be caredul in and attentive to these attempts because they will be made. Phishing will be the primary method because with that theh can easily pass malicious softwares across.

[Fivestar4everMVP]

Thanks for this update, looks to me like scammers and hackers are now working overtime judging from the number of hacks and data leaks that happens this days, I mean a weeks doesn't go by without one protocol getting hacked or wallet company leaking customers data to hackers/scammers, this is scary AF and something really needs to be done.

Companies and protocols should start investing more in security than they invest in trying to gain more users, for in the end, a platform that cant be hacked will eventually gain more users than all of this ones having security issues here and there.

[Charles-Tim]

Thanks for this update, looks to me like scammers and hackers are now working overtime judging from the number of hacks and data leaks that happens this days, I mean a weeks doesn't go by without one protocol getting hacked or wallet company leaking customers data to hackers/scammers, this is scary AF and something really needs to be done.

Nothing more than AI has been a very useful tool for hackers. They do not mind paying for such AI to make the work get done. Most of the hacks this year have the work of AI in it. As AI will be improved, there will be more coming if developers and companies do not take security seriously. I think AI can also help in having good security.

[Nwada001]

With the way things are going now, with data being bridged every now and then, it’s high time we became more vigilant than ever and prepared for any form of attack, phishing attack, even if a service don’t warn its users, I’m more careful in the type of mail I open I just don’t want to fall victim of anything.

[Wiwo]

Users should be thankful too that their funds are safe, so the company can fix things and update the security framework knowing fully well that Technology is getting more complicated and develope their systems accordingly.

From the name lf the hardware wallet company Keystone, it sound familiar with a Nigeria bank name and at first when I read the topic title I actually thought is the bank that got hacked.

What up with all this hack and incident of wallet data leaks and customer data exposure with hardware wallet companies lately? I am one of the customers; I will just dump their device for good, regardless of whatever action they take to contain this incident.

Another question: do we have good numbers of Nigerians using this hardware service?

[Felicity_Tide]

Keystone which is a hardware wallet company, said that their customers data has been hacked.

Well, it's just another typical day in the crypto space, where a company that its customers have entrusted their personal information with, can't even protect that information. If I remember correctly, Revolut was the last service to mistakenly hand over customers information to scammers.

Keystone's apology won't fix the damage because I believe there's always a form of trust between a company or someone who offers a service, and its customers. When that trust is broken, like this very situation, it's always difficult to rebuild. And this brings me to the question I keep asking... Are these companies that make these kinds of mistakes never penalised?. Or, are there no authority to question them?.

[nelson4lov]

Thanks for the heads up. While I'm not a Keystone user, I recognise the fact that it's important for such information about the hack be shared. If their customers don't fall for the phishing scams that will follow, they might actually get through this hack will zero losses on their customer side.

I think it's important now more than ever to focus on security since it appears the AI tooling is giving bad actors more arsenal.