Keystone Hardware Wallet Website Breach Exposes Customer Addresses, Order Data

The exposure is limited to shipping and order data, not keys or payment details, so the direct loss-of-funds risk is low — but address and order records are exactly the material used for targeted phishing and physical follow-up against hardware-wallet owners. That makes the disclosure gap the real story: without a customer count or timeline, affected users cannot judge their own exposure or know whether the vulnerability predates the fix. Whether Keystone follows up with scope and timing detail is the open question, and how hardware-wallet makers handle breach transparency is worth watching across the sector.