Keystone Says Shopify Breach Exposed Customer Shipping and…
By Abdelaziz Fathi
AI summary of the source article
Hardware wallet maker Keystone disclosed a customer data breach on its Shopify-powered store, exposing names, contact details, and shipping addresses. Payment information, private keys, and wallet credentials were not compromised, though questions remain over Keystone's 180-day data deletion policy.
Why it matters
The breach did not expose wallet keys, but "customer addresses and purchase histories can turn an ordinary data leak into a targeted social-engineering and physical-security risk."
Key facts
- Keystone detected unauthorized access on October 20 and confirmed on October 23 that customer shipping information was obtained via Shopify API activity.
- Exposed data included customer names, contact details, shipping addresses, and order details, while payment-card info, recovery phrases, and private keys were unaffected.
- Multiple customers reported receiving breach notices for orders placed more than 180 days earlier, conflicting with Keystone's stated 180-day data deletion policy.
Source excerpt · FinanceFeeds
Keystone Data Breach Tests 180-Day Deletion Promise Hardware wallet maker Keystone has disclosed a customer-data breach involving its Shopify-powered online store, exposing names, contact details, shipping addresses and order information while leaving payment details and wallet credentials unaffected. Keystone said it detected unauthorized access to its website on October 20 and confirmed on Octob…