Keystone admits customer data lingered in its systems after breach
- —The Oct. 20 attack exploited a flaw in a third-party data monitoring tool
- —Names, contact details, shipping addresses and order data of 25,964 buyers were exposed
- —A 180-day deletion policy failed because of an unnoticed tool malfunction
- —Keystone will destroy 18,835 unsold devices and cut data retention to 90 days
Why it matters: The leak raises phishing risks for wallet owners, though private keys and recovery phrases were not compromised.
Source: Koin Bülteni