Current outcome
Keystone is remediating the October 20 website breach: old device-authentication keys are revoked, 18,835 inventory devices are being destroyed, website shipments are paused until new-key devices are produced, and a Shopify data-deletion request is expected to complete by November 3.
Progress timeline
2 material updates- #01
Keystone says website breach exposed hardware wallet buyers’ addresses
Keystone disclosed a website breach in which an unauthorized third party accessed customer shipping information, prompting warnings about targeted phishing and physical attacks.
Source evidence: Cointelegraph
- #02
Keystone宣布将销毁1.88万台设备，确认设备验证密钥遭泄露
Keystone confirmed the leaked data included device-authentication keys, and said it will retire the old keys, destroy 18,835 inventory devices built with them, pause shipment of unfulfilled website orders until new-key devices are produced, and cut customer data retention from 180 to 90 days.
State after update: Keystone is remediating the October 20 website breach: old device-authentication keys are revoked, 18,835 inventory devices are being destroyed, website shipments are paused until new-key devices are produced, and a Shopify data-deletion request is expected to complete by November 3.
Source evidence: theblockbeats