Keystone Hardware Wallet Data Breach Exposes Customer Shipping Details and Raises Physical Attack Fears

Hardware wallet maker Keystone has confirmed that its website was breached, giving an unauthorized party access to customer shipping records. The company said it noticed unusual activity earlier in the week and, on Friday, verified the intrusion after going through API activity together with Shopify. The exposed data covers names, contact details, shipping addresses and order information such as the products purchased. Keystone said it has shut off the attacker’s access, patched the weakness, started an investigation and is emailing those affected. It apologized to customers but did not say how many people were hit.

Phishing and Wrench Attack Risks for Crypto Holders

Keystone cautioned that the stolen details could fuel targeted phishing. Security researcher Taylor Monahan went further, warning that leaked home addresses could lead to physical attacks and even kidnappings. Blockchain security firm CertiK counted 52 verified wrench attacks worldwide in the first half of 2026, up 33% from 39 a year earlier. These crimes use threats or violence to force crypto owners to hand over their funds.

Questions Over Keystone’s Data Retention Policy

A 2023 blog post said Keystone had cut its data retention period to 180 days after incidents at other wallet makers. Yet some buyers who purchased more than two years ago still received breach notices, which suggests old records may not have been deleted. One X user, OG DEGEN, said a scammer posing as law enforcement called them, apparently using details from a 2024 Keystone order, and likely planned to push a fake key reset link. Another user, trintaetres, also got a notice despite an older purchase. Keystone did not answer questions on retention or the number of victims.