Keystone says attackers obtained customers’ names, contact details, shipping addresses, and order details, including items and prices. It detected unauthorized website access on October 20 and confirmed the theft on October 23 after checking API activity with Shopify; the company says it blocked access, fixed the vulnerability, opened an investigation, and is contacting affected customers. Keystone’s announcement

Keystone says attackers obtained customers’ names, contact details, shipping addresses, and order details, including items and prices. It detected unauthorized website access on October 20 and confirmed the theft on October 23 after checking API activity with Shopify; the company says it blocked access, fixed the vulnerability, opened an investigation, and is contacting affected customers. Keystone’s announcement

Keystone says payment card and bank details, recovery phrases, private keys, and wallet passwords were not exposed. It warns that scammers may impersonate Keystone by phone, text, email, or mail and offer refunds, replacement devices, or supposed fixes for an order or address.

Do not share recovery phrases or private keys, enter a recovery phrase into a device you did not order, or click links in unexpected messages. Keystone says it will never ask for recovery phrases or private keys; type keyst.one yourself, rely on official channels, and contact [email protected] if a message seems suspicious. Keystone’s announcement