Keystone hardware wallet key leak forces destruction of 19,000 devices
Keystone will destroy nearly 19,000 unshipped hardware wallets after an attacker accessed its device-verification key, exposing customer shipping data.
Keystone confirms shipping data breach and key theft
Keystone Hardware Wallet announced on X on October 24, 2026 that an attacker had accessed its customer shipping database. The breach exposed names, contact details, shipping addresses, and order specifics for roughly 26,000 orders placed through the company’s Shopify storefront. The company confirmed the compromise 18 hours after a customer reported a social-engineering call that used Keystone order information to impersonate staff.
The firm stated that payment data and wallet private keys were not compromised, but warned that scammers might offer refunds, replacements, or “fixes” for orders. Keystone apologized and cited unauthorized access to its official website on October 20, 2026, followed by verification of API activity with Shopify on October 23.
Device-verification key stolen
Keystone’s update also revealed that the attacker obtained the WebAuth key used to authenticate device authenticity. This key is central to the company’s supply-chain integrity: it allows the manufacturer to confirm that a device is genuine before shipping. With the key compromised, an attacker could potentially forge authenticity checks or tamper with device firmware.
Inventory purge and shipping halt
In response, Keystone will destroy almost 19,000 unshipped hardware wallets. Shipping of newly built units will be suspended until a new WebAuth key is deployed. The company noted that its automated data-deletion tool failed to operate reliably, leaving personal information beyond the permitted 180-day retention period.
Parallel incidents at other wallet makers
Foundation Passport reported phishing emails targeting its users early Monday. Screenshots showed scare tactics around a display module, echoing recent Ledger device compromises. The manufacturer traced the spam to compromised API keys on Cloudflare and confirmed that its official domain was used. Foundation Passport also faced data-migration gaps: older tables retained personal information even after a purge, and recent Shopify orders may have been exposed.
Ledger, a repeat offender, continues to grapple with security incidents. Its spyware scandal and Coldcard’s seed-generation bug have already cost users over $200 million. Ledger’s own data-deletion promises have been questioned, as the company has struggled to ensure that customer data is fully erased after the promised period.
Market and operational implications
Keystone’s decision to destroy 19,000 units represents a tangible cost to the company and its distributors. The inventory loss will affect supply-chain planning and may trigger price adjustments for end users. The suspension of shipping pending a new key also introduces a delay that could erode customer confidence.
The breach highlights the fragility of automated data-deletion mechanisms in the hardware-wallet sector. Firms that rely on automated tools without rigorous audit trails risk retaining sensitive data beyond legal or contractual limits. The theft of a device-verification key also raises concerns about supply-chain trust: if an attacker can forge authenticity checks, the entire premise of cold storage security is undermined.
What to watch next
Regulators may scrutinize data-retention practices for hardware-wallet manufacturers, especially those that process shipping and order information through third-party platforms like Shopify. Industry bodies could push for stricter audit requirements for automated deletion tools.
Manufacturers will likely review their device-verification processes, possibly adopting hardware-backed keys or multi-factor authentication to prevent key compromise. Customers may demand transparency about how their shipping data is handled and how device authenticity is verified.
The incidents at Keystone, Foundation Passport, and Ledger suggest a pattern: security lapses in data handling and device verification can cascade into operational disruptions and financial losses. Stakeholders across the supply chain—manufacturers, distributors, and users—must assess whether current safeguards meet the evolving threat landscape.
Related coverage
- XRP Price Target: $1.45 Resistance Tests the Path to $5
- Bank of Russia crypto exchanges Expand to 17 Firms, Sberbank and VTB Set to Offer Retail Trading
- Chainlink Price Forecast 2026: Claude AI Projects Triple-Digits