Keystone Hardware Wallet said its official website was compromised on Oct. 20 after attackers exploited a vulnerability in a third-party monitoring tool. The company said about 25,964 purchase records containing personal information, 12,873 unpaid checkout records, and device WebAuth authentication keys were obtained in the incident. It added that seed phrases, private keys, and payment information were not affected. In response, Keystone said it will destroy 18,835 devices in inventory that contain old keys, suspend shipments from its website, and switch to a pre-sale model. The company also told users there is no need to move assets and warned them to watch for scams using claims such as a supposed product “recall.” The disclosure was cited by ChainCatcher in a 7x24 news update.
Keystone Hardware Wallet said its official website was breached on Oct. 20 after attackers exploited a vulnerability in a third-party monitoring tool.
According to the company’s statement, about 25,964 purchase records containing personal information, 12,873 unpaid checkout records, and device WebAuth authentication keys were obtained. Keystone said seed phrases, private keys, and payment information were not affected.
The company said it will destroy 18,835 devices in inventory that contain old keys, suspend shipments through its website, and move to a pre-sale model. It also told users there is no need to transfer assets and warned them to stay alert to scams framed as a “recall” or similar claims.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
