Keystone has disclosed that personal data for 25,964 buyer records remained stored in its breached web store, with some information retained beyond the company's own 180-day deletion policy. The extended retention occurred because a bulk-erasure tool developed by Keystone repeatedly failed to execute deletions properly. The disclosure follows a security breach at the hardware wallet manufacturer's online store, revealing that customer data persisted longer than intended due to internal system failures.