Keystone says website breach exposed hardware wallet buyers’ addresses

The leak matters less for what was taken than for what it enables: shipping addresses tie known hardware wallet buyers to physical locations, turning an ordinary data breach into a personal-safety problem that phishing alone does not capture. Keystone's silence on scale and timing leaves customers unable to judge their own exposure, which is itself a trust issue for a firm whose product is security. The open question is whether Keystone publishes a fuller account of the breach and whether other hardware vendors treat customer address data as a liability rather than a routine record.