Keystone confirms its official website was breached: customer data and the device authenticity verification key leaked
According to the vendor, monitoring detected unauthorized access to the official website on October 20, 2026: an attacker escalated privileges through a vulnerability in a third-party data monitoring system, obtained some customer data and the WebAuth key used to verify device authenticity. The breach affected 25,964 customer records from 2024–2026 containing names, contact details, shipping addresses and order details, as well as 12,873 incomplete checkouts containing names, contact details and shipping information; purchases through Amazon and other channels were not affected. The vendor says the vulnerability has been fixed and unsafe website functions disabled; according to its information, recovery phrases, private keys and payment data were not affected. The key leak makes it possible for a counterfeit device to pass the authenticity check — production has switched to a new key, 18,835 devices in warehouse stock with the old key will be destroyed, and shipments of website orders have been suspended.
If you received a device after October 20, 2026 and it contains the old authentication key: do not use it, run the check on the authentication page and ask support for additional verification — begin using it only after its authenticity is confirmed. The vendor considers devices delivered before October 20, 2026 unaffected. There is no need to move funds solely because of this incident. Expect targeted phishing: calls and emails about “asset migration,” “wallet verification” or “device returns/recalls” are scams; the vendor is not asking for devices to be returned. Do not enter your seed anywhere, and type the website address manually.
Sources:
Incident history
- 26 OctKeystone confirms its official website was breached: customer data and the device authenticity verification key leaked
- 29 OctKeystone: leaked authenticity-check key allows counterfeit devices to pass verification — shipments received from October 20 are at risk