Keystone says website breach exposed customer contact and order data, not wallet credentials
Keystone said unauthorized access to its website exposed customer names, contact details, shipping addresses, and order information, including purchased items and prices. The company detected the access on October 20 and confirmed the exposure on October 23 after reviewing API activity with Shopify [1] [2].
Keystone said it blocked the access, fixed the vulnerability, and is notifying affected customers. It said payment details, wallet passwords, private keys, and recovery phrases were not exposed. Phemex reported that exposed address data could be used for targeted phishing or social engineering [1] [3] [4] [2].
Anonymous feedback used to improve internal story ranking. No public totals are shown.
Share
Share this article
Share this article on social platforms.
Support ClusterWire
If you find ClusterWire useful, tips help cover hosting and infrastructure costs.
We record anonymous interactions with tip buttons to understand feature usage. We do not include IP addresses, user-agent strings, or wallet addresses in these tip analytics. Blockchain transactions are public and may reveal the sending address.
Sources
Review the sources used to produce this brief. Citations open the referenced material in a new tab.
- 1Keystone Confirms Customer Data Exposure Following Unauthorized Website AccessWu Blockchain• Oct 24, 2026
- 2Keystone Confirms Customer Data Breach Following Unauthorized Website AccessBlockonomi• Oct 24, 2026
- 3Keystone Website Breach Exposes Customer Addresses and Order DetailsThe Defiant• Oct 24, 2026
Updates and corrections
No changes recorded in the new revision log. Earlier edits may not be included.
Topics
Related Topics
Topics identified from the sources associated with this article.