Hardware wallet maker Keystone said a security flaw on its website allowed an unauthorized third party to obtain customer information, including names, contact details, shipping addresses and ordered products. The company said it has blocked access, fixed the vulnerability and started an investigation, while also notifying affected customers. It did not disclose how many users were impacted. Security researcher Taylor Monahan warned that exposed shipping addresses could leave customers open to targeted scams and even physical attacks. Keystone had said in 2023 that it shortened its customer data retention period to 180 days, but some customers said they still received breach notifications more than two years after buying a device. The disclosure puts fresh attention on how hardware wallet vendors store and handle user data after purchase.
Hardware wallet maker Keystone said a security flaw on its website allowed an unauthorized third party to obtain customer information, including names, contact details, shipping addresses and ordered products.
Company says access was blocked and the flaw was fixed
Keystone said it has blocked access, fixed the vulnerability and opened an investigation. The company also said it notified affected customers, but did not disclose the number of users impacted.
Taylor Monahan warns of risks tied to exposed addresses
Security researcher Taylor Monahan said leaked shipping addresses could expose customers to targeted scams and physical attacks.
Questions remain over data retention
Keystone said in 2023 that it had reduced its customer data retention period to 180 days. Even so, some customers said they received breach notifications more than two years after purchasing their devices.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
