Keystone to destroy 18,835 compromised hardware wallets after data breach that affected 25,964 customers

<p>Keystone<sup id="fnref:1"><a href="#fn:1" class="footnote" rel="footnote" role="doc-noteref">1</a></sup> has published a statement today<sup id="fnref:2"><a href="#fn:2" class="footnote" rel="footnote" role="doc-noteref">2</a></sup> detailing the October 24 data breach disclosure<sup id="fnref:3"><a href="#fn:3" class="footnote" rel="footnote" role="doc-noteref">3</a></sup>, which confirms that private shipping information for at least 25,964 customers was exposed.</p> <p>The company has apologized for the security incident, temporarily suspended shipping and promised to destroy 18,835 devices that had their authentication key compromised:</p> <blockquote> <p>This incident has caused concern and inconvenience and has damaged your trust in Keystone. We sincerely apologize. [..] Effective immediately, the customer personal information retention period will be shortened from 180 days to 90 days. [..] The 18,835 devices in existing inventory that contain the old key will be destroyed.</p> </blockquote> <h3 id="incident-overview">Incident Overview</h3> <div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>* [Timeline] - October 20: unau