ChainCatcher report: According to a statement from Keystone Hardware Wallet, its official website was compromised on October 20 via a vulnerability in a third-party monitoring tool, resulting in the exposure of approximately 25,964 purchase records containing personal information, 12,873 unpaid checkout records, and device WebAuth authentication keys. Mnemonic phrases, private keys, and payment information were not affected. Keystone will destroy 18,835 devices in inventory containing the old keys, suspend official website shipments in favor of pre-orders, and remind users that there is no need to transfer assets, while warning against scams such as "recall" schemes.
Keystone Confirms Security Incident: 26,000 Customer Records and Device Authentication Keys Exposed
ChaincatcherShare
Summary
Keystone has confirmed a security breach following a hack of its website on October 20 through a vulnerability in a third-party monitoring tool. Approximately 25,964 customer purchase records, 12,873 incomplete checkouts, and device WebAuth keys were exposed. Seed phrases, private keys, and payment data were not compromised. The company will destroy 18,835 devices with outdated keys, suspend website shipments, and transition to a pre-order system. Users are advised to avoid asset transfers and remain vigilant against scams related to false "recall" claims. The incident underscores the importance of staying informed about vulnerability updates.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.