Keystone Wallet reported unauthorized access to its website that exposed customer shipping information. The company says payment data, passwords, recovery phrases and private keys were not compromised. The breach follows separate security incidents at Ledger and Trezor.
Keystone Wallet has become the latest big hardware wallet provider to report a security issue after unauthorized access to its website exposed customer information.
The breach came while Ledger and Trezor, the two giants of the industry, have been dealing with separate security incidents since the summer.
Keystone customer data exposed
The company disclosed over the weekend that it detected unauthorized access to its official website on October 20. After reviewing API activity on Shopify, the team confirmed several days later that an unauthorized third party had obtained customer shipping information.
The exposed data includes names, contact details, shipping addresses, and order information such as the products purchased and at what prices. However, Keystone said payment card details, bank information, wallet passwords, recovery phrases and private keys were not compromised.
Phishing risk for affected buyers
Keystone has since blocked the unauthorized access, patched the vulnerability, launched an investigation and begun contacting affected clients. It also promised a more detailed report in the following days.
Nevertheless, the leaked information creates another security problem. Knowing that a person bought a hardware wallet, and having their name, contact information and physical address, could allow criminals to launch highly targeted phishing or social-engineering attacks.
Consequently, Keystone warned that scammers could impersonate the company through phone calls, texts, emails or even physical mail while offering refunds, replacement devices or supposed fixes.
Source: CryptoPotato
Trading involves risk.
Risk Disclaimer
