Keystone Hardware Wallet Hack Leaks Customer Names and Home Addresses

TLDR

• Crypto hardware wallet maker Keystone confirmed that an unauthorized third party accessed customer shipping data, including names, contact details, and addresses.
• Keystone said it blocked access, fixed the vulnerability, and is emailing affected customers, but it has not said how many people were hit.
• Security researcher Taylor Monahan warned that leaked addresses could expose crypto holders to physical attacks and kidnappings.
• CertiK recorded 52 verified wrench attacks in the first half of 2026, up 33% from the same period last year.
• Some customers who bought devices over two years ago received breach notices, raising questions about Keystone’s 180-day data deletion policy.

Crypto hardware wallet maker Keystone has disclosed a security breach that exposed customer shipping information. The company apologized to users in a post on X over the weekend.

Keystone said it detected suspicious activity earlier in the week. On Friday, after reviewing API activity with Shopify, it confirmed that an unauthorized third party had accessed customer data.

The exposed information includes names, contact details, shipping addresses, and order details such as items bought and prices paid.

“We’ve blocked access, fixed the vulnerability, opened an investigation, and are emailing affected customers,” the company said. Keystone did not say how many customers were affected.

“We owe you an apology. You trusted us with those details, and we’re sorry we didn’t keep them safe,” the company wrote.

Researchers Warn of Physical Attack Risks

Keystone warned that the leaked data could be used for targeted phishing attacks. Security researcher Taylor Monahan raised a different concern.

Monahan said the real danger of leaked shipping addresses is physical assault and kidnapping, not phishing. Attackers could use the data to find where wallet owners live.

These crimes are often called “wrench attacks.” They involve using threats or violence to force crypto holders to hand over their assets.

Blockchain security firm CertiK recorded 52 verified wrench attacks worldwide in the first half of 2026. That is up 33% from 39 in the same period last year.

AMBCrypto reported 122 crypto-related physical attacks across 31 countries so far in 2026, with France as the main hot spot. Chainalysis estimated losses from such attacks at over $100 million as of August.

The Keystone breach follows other security problems in the sector. These include a Ledger supply chain attack worth over $100 million, a $116 million Coldcard exploit, and a Trezor data breach in August.

Zach Herbert, founder of Foundation wallet, said he “largely” agrees that “hardware wallets are dead.” He said the answer is an ultra-secure, open architecture hardware security platform.

Questions Over Keystone’s Data Retention Policy

The breach has also raised questions about how long Keystone keeps customer data. In a 2023 blog post, the company said it had cut its data retention period to 180 days.

However, some customers said they received breach notices for devices bought more than two years ago. This suggests some older order records may not have been deleted as promised.

An X user called “OG DEGEN” said a scammer posing as law enforcement called them about a fraud case. The user believes the caller got their details from a Keystone order placed in 2024.

“I think their plan was to convince me that my private keys had been exposed and then send me a phishing link to supposedly reset them,” the user wrote.

Another X user, trintaetres, also said they got the email notice despite buying a device over two years ago.

Cointelegraph asked Keystone how data from older purchases was exposed and how many customers were affected. The company had not responded by publication time.

The post Keystone Hardware Wallet Hack Leaks Customer Names and Home Addresses appeared first on Blockonomi.