Keystone discloses breach exposing wallet buyers' addresses and purchase details

Hardware wallet maker Keystone disclosed on Oct. 24 that unauthorized access to its website exposed customer names, contact information, shipping addresses and purchase details, Bitcoin.com News reported. Keystone says private keys, recovery phrases and payment information were not compromised. The company detected suspicious access on Oct. 20 and confirmed the exposure by Oct. 23 after examining application programming interface activity with Shopify, its e-commerce provider. Keystone says it blocked the intrusion, patched the vulnerability and began notifying affected customers. Keystone warned of fraudulent refund offers, replacement devices and messages requesting sensitive information. It has not disclosed the number of affected buyers or precisely how the access occurred.