Threat Intelligence Brief
Curated summary with source attribution
Source: cryptoticker.io
Threat Risk: Medium
Victim: Keystone hardware wallet customers
Incident: Unauthorized access to a web shop resulting in the theft of customer shipping data.
Impact: Exposure of names, contact details, and delivery addresses of cryptocurrency hardware wallet owners.
Attacker: Unidentified threat actors
Analysis: Attackers exploited a vulnerability in Keystone’s Shopify-based store to exfiltrate customer shipping and order data. Although private keys and recovery phrases were not compromised, the leak confirms which individuals own hardware wallets and where they live. This specific combination of data significantly increases the risk of highly targeted social engineering and physical security threats.
Recommendations: Exercise extreme caution with unsolicited emails or SMS claiming to be from Keystone support.; Ignore any offers for ‘replacement programs’ or ‘security updates’ delivered via non-official channels.; Review physical security and be alert for suspicious activities following the PII leak.
Source: CryptoTicker
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source