Keystone said an unauthorized third party accessed customer shipping information through its website, including names, contact details, addresses and order details. The company said it had blocked access, fixed the vulnerability, opened an investigation and begun emailing affected customers. It did not say how many customers were affected.
Keystone warned the information could be used for targeted phishing. Security researcher Taylor Monahan also raised concerns about possible physical attacks; the source does not report any such attack linked to the breach. Some customers said they received breach notices despite buying devices more than two years ago, raising questions about Keystone’s stated 180-day data retention policy. Keystone had not answered questions about older records or the number of affected customers by publication time.
