Keystone Updates Security Incident Handling: 18,835 Devices with Old Keys to Be Destroyed, Customer Data Retention Cut to 90 Days

PANews, October 26 - Hardware wallet manufacturer Keystone has released an update on its security incident handling progress, disclosing that the incident involves 25,964 buyer records containing personal information. Device verification keys obtained by the attacker could potentially be used to manufacture counterfeit devices that pass official website verification.

In response, Keystone will cease using old keys, destroy 18,835 devices in inventory that use old keys, and suspend delivery of unshipped orders from its official website, resuming shipments only after devices with new keys are produced. Additionally, the company will shorten the retention period for customer personal information from 180 days to 90 days. Keystone reminds users that devices received after October 20 using old verification keys, even if they pass official website verification, cannot be completely ruled out as counterfeit, and users should contact customer service for further verification.