Keystone Halts Web Orders, Scraps 18,835 Wallets After Authenticity Key Theft

The hardware wallet's core selling point is verified authenticity, so a stolen signing key strikes at the trust layer rather than at funds, and the scuttled inventory shows the company treating the breach as physical, not just informational. The retention overrun is the quieter problem: data held past its own stated limit turns a contained incident into a governance question. For buyers of self-custody devices, the open question is whether authenticity verification can be re-established without a broad recall, and whether other manufacturers' key-management practices face similar scrutiny.