Keystone to destroy 18,835 Bitcoin wallets after factory key theft

What sources claim

• Keystone said it will destroy 18,835 unsold devices after attackers obtained the WebAuth key written into each device at the factory, which the company said could let an attacker produce counterfeits that pass its authentication checks.
• Keystone said 51,083 buyer records were involved in the Shopify store breach, but 25,119 had already been erased, leaving 25,964 records from 2024 to 2026 with names, contact details, shipping addresses and order information.
• Keystone said it failed to fulfill its commitment to erase customer data on time because some automated erasure tasks failed and the failures went undetected, and it accepted responsibility for the failure.

Still unresolved

• Who carried out the attack, and when the attacker first gained access to the factory key and customer records, according to Keystone's own account.
• Whether Keystone has notified affected buyers directly and what replacement or remediation it will offer for orders placed through its website.

Evidence levels describe source coverage, not the probability that a report is true. Price moves and their timing cannot establish a cause; minute samples show an observed interval and alert thresholds are heuristics. Explanations are model-assisted, with citations and figures checked. Source titles stay in their original language; full articles are not republished.

Measured from the sample nearest site detection, on the same source and quote currency.