Keystone customers data hacked

[The Founding Titan]

The way it should be. I have also seen in this forum  where we have bounties https://bitcointalk.org/sbounties.php aimed at finding looking for possible loopholes that can lead to a hack or data breach in the forum. This is there and open for public access. These companies too can take their security strategies to this level of awareness, good hackers will help fine most of this loopholes for the bounty sake. They must not wait to discover from bad actors (hackers) who will get the public information for their selfish interests.

Users should be thankful too that their funds are safe, so the company can fix things and update the security framework knowing fully well that Technology is getting more complicated and develope their systems accordingly.

One or two can still be missed and while the company is celebrating that they've closed all of their loophole an attack can happen and their just recently vetted and trusted system will be dismantled, at this point will you say they didn't do enough to protect themselves from hackers? It doesn't work that way, after all it's not like that wallets and exchanges themselves want to be hacked, they do whatever they can to prevent it from happening but at the end na who them catch be thief.

[PremiumcryptoHub]

When I saw the name 'keystone,' I was thinking it was the bank because one of my banker friends posted about similar cases of the rise in phishing attacks and hacks online and warned about clicking on just about any links we see. So my thoughts went there first, until I read through and learnt it was about hardware wallet.

However, I am beginning to lost trust on most of these hardware wallet companies because it's becoming more obvious that our information is no longer saved with them. Thus, they shouldn't fold hands and wait for which platform is next, adequate action should be taken to ensure of a lasting solution to this unresting situation we are experiencing.

Nowadays many people are losing trust in most of these Hardware wallet companies because they are leaking our information and our bitcoins or cryptos are stolen due to hardware wall hacking like (Ledger and coldcard hardware hacking has stolen large number of bitcoins).

Hardware wallet maker KeyStone noted that its customers' information had been hacked and also confirmed that hackers had stolen a device's authentication key resulting in the exposure of 25,964 customers' personal information. As a precautionary measure following their leak, we see that Keystone has destroyed 18,835 units in inventory and has suspended deliveries.

Hardware wallet maker @KeystoneWallet discloses a security breach exposing personal data of 25,964 customers and a device authentication key, destroying 18,835 units in inventory and suspending shipments as a precaution, with no wallet credentials or recovery phrases compromised.

[Sticky Bomb]

Users should be thankful too that their funds are safe, so the company can fix things and update the security framework knowing fully well that Technology is getting more complicated and develope their systems accordingly.

Their funds are safe, but their personal securities have been compromised, their details are in the open, possibly in the hands of scammers, and physical burglars. You know what that means? They're open to phishing mails, wrench attacks and possible blackmail and impersonation. Funds are safe, but they've been exposed to danger. KYC information getting into the hands of bad actors isn't good at all, the company was careless by not making sure the sales channels delete users data in line with their data deleting principle, they failed their users in that regard.

[Mr Reporter]

With the way things are going now, with data being bridged every now and then, it’s high time we became more vigilant than ever and prepared for any form of attack, phishing attack, even if a service don’t warn its users, I’m more careful in the type of mail I open I just don’t want to fall victim of anything.

Take me for example I think I should do what you are doing now it boils help me, in fact Data breaches every week had gone out of hand this month tou hear some quite number of people that there data are out there, to my greatest concern even the loan applications are now falling in victim of this date breach…

Just as you have said it not possible to wait for the service to warn you, in some month or so a company hide there breach for months before telling users….

[IceLincoln]

Keystone which is a hardware wallet company, said that their customers data has been hacked.

This is what what posted by the hardware wallet company on X: https://x.com/KeystoneWallet/status/2114054080754770137

We owe you an apology.
On October 20, we detected unauthorized access to our official website. After verifying API activity with Shopify, we confirmed on October 23 that a third party obtained customer shipping information. You trusted us with those details, and we're sorry we didn't keep them safe.
Exposed: names, contact details, shipping addresses, and order details (items and prices).
Not exposed: payment card or bank details, recovery phrases, private keys, or wallet passwords.
We've blocked access, fixed the vulnerability, opened an investigation, and are emailing affected customers.
Scammers may pose as Keystone by phone, text, email, or mail, offering refunds, replacement devices, or "fixes" for your order or address. None of it is from us.

NEVER share your recovery phrase or private keys, and NEVER enter your recovery phrase into a device you didn't order. We will never ask for them. Don't click links in unexpected messages. Type keyst.one yourself.
A detailed report is coming soon.
Until then, trust only our official channels. If anything feels off, email support@keyst.one. We'd rather hear from you than have you take a chance.
Again, we're truly sorry to everyone affected.

If you are using Keystone as a Nigerian, be careful of phishing attacks. Any email received to input your seed phrase somewhere online like a site or link telling you to download something, just ignore the links.

These hardware companies should start doing better in protecting customer data than they’re doing just now.
When I hear such news I get surprised like really shocked that people still fall for Phishing attacks. I don’t know how in this age and time with all happening in this tech and crypto space, some people are still gullible to put their seedphrase or any details to a message they just received.. it’s crazy to me.
I’m very sceptical when it has to do with my money and data.