Keystone 确认官网遭未授权访问，客户订单与收货信息泄露
Keystone Confirms Customer Data Exposure Following Unauthorized Website Access Keystone Hardware Wallet confirmed that a third party obtained customer shipping and order information following unauthorized access to its official website. The incident was detected on October 20, with the data exposure confirmed on October 23 after reviewing API activity with Shopify. Exposed information included names, contact details, shipping addresses, purchased items, and prices. Payment card and bank details, recovery phrases, private keys, and wallet passwords were not exposed. Keystone said it has blocked the access, fixed the vulnerability, and is notifying affected customers. It also warned of impersonation scams involving fake refunds, replacement devices, or order fixes.
Keystone 硬件钱包确认其官网遭未授权访问，第三方获取了客户的收货与订单信息。事件于 10 月 20 日被发现，10 月 23 日经核查 Shopify API 活动后确认数据泄露，涉及姓名、联系方式、收货地址、购买商品及价格。Keystone 表示支付卡与银行信息、助记词、私钥和钱包密码未泄露，已阻断访问并修复漏洞，同时提醒警惕假冒退款、换机或修复订单的诈骗。
来源：WuBlockchain · x.com