How many users and devices were impacted?
The security breach at Keystone, a provider of self-custody hardware wallets, has resulted in the compromise of sensitive data for 25,964 individual customers. Additionally, the company has confirmed that it will destroy 18,835 hardware wallet units currently in its inventory. This corrective measure was deemed necessary after internal audits revealed that a private key used to verify the authenticity of these wallets had been accessed by unauthorized parties during the cyberattack.
Why was an authentication key stolen?
The theft of the authenticity verification key represents a critical vulnerability for the cryptocurrency hardware market, as it theoretically permits malicious actors to manufacture and distribute counterfeit devices that would pass official verification checks. By replicating this key, attackers could produce hardware that mimics the security protocols of genuine Keystone wallets, potentially exposing unsuspecting users to fund theft or supply chain attacks. Keystone has opted for the total destruction of the affected inventory to prevent any compromised units from reaching the consumer market.
The breach exposed 25,964 buyer records, some kept past Keystone’s 180-day deletion policy after an automated tool failed without the firm noticing.
What caused the failure of customer data storage?
Investigations into the incident indicate that Keystone failed to adhere to its stated privacy commitments regarding customer information. While the company maintained a internal policy to purge buyer records after 180 days, an automated data-management tool malfunctioned, leading to the retention of records that should have been deleted. Keystone reportedly remained unaware of this technical failure until the breach occurred, resulting in a significantly larger volume of personal information being exposed to the hackers than would have been available had the deletion policy functioned as intended.
What are the implications for crypto hardware security?
Hardware wallets are widely considered the gold standard for secure cryptocurrency storage, as they keep private keys offline in a cold-storage environment. However, this incident highlights the reality that even specialized hardware manufacturers face supply chain and software risks. For both crypto-native users who rely on these devices for high-value asset protection and mainstream consumers entering the space, the Keystone breach serves as a stark reminder that verifying the integrity of a wallet remains paramount. Moving forward, the industry is likely to face increased scrutiny regarding how manufacturers manage the digital keys used to authenticate their physical product lines.
Market Snapshot
| Asset | Price | 24h | Market Cap |
|---|---|---|---|
 Bitcoin BTC | $79,825 | -0.44% | $1604.6B |
 Ethereum ETH | $2,313 | -0.43% | $282.5B |
 BNB BNB | $739.09 | +0.14% | $97.2B |
 XRP XRP | $1.3 | +1.33% | $82.6B |
 Solana SOL | $99.99 | -1.19% | $59.0B |
 Dogecoin DOGE | $0.0772 | +0.45% | $12.1B |
 Cardano ADA | $0.204 | -0.18% | $7.7B |
Live data: CoinGecko — 2026-10-27 11:22 UTC
