Hardware wallet manufacturer Keystone disclosed unauthorized access to its official website detected on October 20, with a third party obtaining customer shipping information. The breach was confirmed on October 23 after verifying API activity with Shopify. Leaked data includes names, contact information, shipping addresses, and order details such as products and prices. Keystone confirmed that payment card or bank information, recovery phrases, private keys, and wallet passwords were not compromised. The company has blocked the unauthorized access, patched the vulnerability, launched an investigation, and is notifying affected users via email. Keystone warned users to remain vigilant against scammers impersonating the company through phone calls, text messages, emails, or letters under pretexts of refunds or device replacements, emphasizing that recovery phrases and private keys should never be shared with anyone.