Customer names and shipping addresses obtained by third parties; Keystone confirms unauthorized access to official website

Odaily reports: According to monitoring by Keystone, Keystone discovered unauthorized access to its official website on October 20. After verifying API activity with Shopify, it confirmed on October 23 that a third party had obtained customer shipping information. The leaked information includes names, contact details, shipping addresses, and order details, covering products and prices; payment card or bank information, mnemonic phrases, private keys, and wallet passwords were not leaked. Keystone has blocked the access, fixed the vulnerability, and launched an investigation. It is notifying affected users via email and reminding users to be vigilant against scams impersonating Keystone under the guise of refunds or device replacements, and under no circumstances to provide mnemonic phrases or private keys to anyone.