Keystone's website has been found to have a security vulnerability that has leaked customer information, including names and addresses.

A security breach has compromised the website of crypto hardware wallet maker Keystone, allowing an unauthorized third party to access customers' names, contact information, shipping addresses, and order details. Keystone has blocked access, patched the vulnerability, launched an investigation, and notified affected customers. Security researcher Taylor Monahan warned that the leaked shipping addresses could expose customers to targeted scams and personal attacks. Some customers reported receiving notifications of the breach more than two years after purchasing their devices.