Keystone breach deepens: Hackers stole key used to verify wallets as genuine

Keystone initially disclosed a leak of customer information but has since disclosed that hackers also stole a key that could allow counterfeit wallets to pass authenticity checks.

Hardware wallet maker Keystone said an attacker who breached its website last week also stole a key used to verify the authenticity of its devices, widening the scope of an incident initially disclosed as a customer data leak.

In a statement Monday, Keystone said the stolen authentication key could allow attackers to produce counterfeit wallets that pass its authenticity checks.

“These devices could then be sold or shipped to customers, who might unknowingly use them as genuine products, potentially resulting in asset theft,” Keystone said.  

Read more