Keystone says website breach exposed customer addresses and order data
The wallet maker says it found unauthorized access on October 20th, 2026, and confirmed the Shopify-linked data exposure three days later.
By Ryan Merket · Published
Primary source: X
Why it matters
Customer records can give scammers details for targeted impersonation even when a wallet's keys remain untouched. The breach puts Keystone's ecommerce data controls alongside the security claims it makes about its product.

Keystone, the hardware-wallet maker led by founder and CEO Lixin Liu (@BitcoinLixin), said a third party accessed its official website and obtained customer shipping information. In a post on X published October 24th, 2026, Keystone said it detected unauthorized access on October 20th and confirmed the data exposure on October 23rd after checking API activity with Shopify.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.