Keystone, a cold wallet manufacturer, confirmed that customer data was leaked from its Shopify online store, including names, contact information, shipping addresses, and order details. Keystone detected the incident on October 20 and confirmed unauthorized access on October 23. The company has since blocked access, patched the vulnerability, and contacted affected customers, but has not disclosed the number of individuals impacted. Some customers reported that data from orders over 180 days old—even from 2024—was still exposed, despite Keystone’s prior commitment to delete shipping information after a maximum of 180 days. The company has not publicly addressed this issue.