Keystone destroys nearly 19,000 crypto wallets after website breach

Traders Union
All News
Crypto
Keystone destroys wallets after breach

Highlights

Keystone is destroying 18,835 unsold crypto wallet units and suspending shipments after an Oct. 20 website breach exposed an embedded production key.
The breach compromised personal data for 25,964 customers with orders dated 2024–2026 and 12,873 unpaid checkout records due to a failed 180-day deletion policy.
Keystone will shorten data retention to 90 days, implement new device authentication keys, and move to a preorder model to mitigate increasing sector-wide hardware wallet risks.

Breach response and affected devices

As reported by CoinDesk, citing Keystone in a post on X, an attacker gained access to the company’s website on Oct. 20 through a flaw in a third-party data monitoring tool. The company says it is destroying 18,835 unsold units and suspending shipments because the stolen key is embedded during production and cannot be changed after devices are made.

Keystone says the exposed data includes names, contact details, shipping addresses and order information tied to 25,964 buyer records from 2024 through 2026. Another 12,873 unpaid checkout records may also have been affected.

The company says devices delivered before Oct. 20 remain safe to use if they pass authentication, while customers who received devices using the old key after that date should seek further checks before use. Keystone also says users do not need to move funds because of the breach alone and warns customers against fake recall or asset migration messages.

Operational changes and wider hardware wallet risks

Keystone says some customer records should have been deleted under its 180-day retention policy, but an automated deletion tool failed without the company detecting the problem. The company says it accepts responsibility for not erasing customer data on time and plans to cut retention to 90 days.

To address the incident, Keystone says it will replace the authentication key in new devices and shift website sales to a preorder model. The breach adds to a wider run of attacks affecting hardware wallet users this year, including a separate disclosure by Foundation a day earlier about phishing emails sent from messages appearing to come from its official domains.

Other recent incidents have also raised pressure on the sector’s supply chain and software controls. Keystone says the exposure of its authentication key increases the risk that fake devices could appear genuine online, potentially putting customer funds at risk if counterfeit products reach the market.

In our earlier article on the surge in cybersecurity funding in Q3 2026, we highlighted how total investment climbed to $6.8 billion as fewer but much larger late-stage rounds dominated the market. We also noted that AI-driven and identity security companies attracted the most capital, alongside continued consolidation through major acquisitions—signaling that spending is rising as organizations respond to escalating security risks.

This material may contain third-party opinions, none of the data and information on this webpage constitutes investment advice according to our Disclaimer. While we adhere to strict Editorial Integrity, this post may contain references to products from our partners.