Keystone disclosed a cyberattack impacting a third-party monitoring tool, resulting in the theft of a device verification key and customer order data.
Read about the incident response, including the destruction of unsold hardware units and updated data retention policies.
What evidence was exposed?
The attack resulted in the exposure of personal data from two categories of orders:
- 25.964 completed orders: Names and addresses were exposed.
- 12.873 incomplete orders: Data that had been entered during the purchase process was displayed.
The company clarified that no banking information, government documents or user passwords were stolen. As a protective measure, Keystone announced that it would reduce the retention period for its customers' personal data from 180 to 90 days.
The problem with the digital key
The stolen key is used solely to verify the authenticity of devices when they are purchased. The company emphasizes that this key has nothing to do with users' digital currencies, nor can it compromise their private passwords.
READ ALSO
Australian authorities cut off connection to 180.000 infected computers
Because the key is embedded in the devices during their manufacture, Keystone decided to destroy 18.835 unsold devices bearing this particular key.
What applies to device owners?
Users who received their device before October 20, 2026 are considered safe and can continue using it as normal. For those who received their device after this date, Keystone recommends contacting the company's support team before proceeding with use.
Beware of scam messages
The company is warning its customers to be extra cautious of suspicious messages they may receive. Scammers may pretend to represent Keystone, offering refunds or device replacements in order to steal information. The company reminds customers that it will never ask users for passwords to help them with their device.
G
Hacks.gr on Google
Set it as a preferred source for cybersecurity updates.
Preferred source
end of article
Top comments (0)