Customer information retention period shortened to 90 days, Keystone to destroy 18,835 legacy key devices

Odaily reports: Hardware wallet manufacturer Keystone has released an update on its security incident response, stating that the incident involved 25,964 buyer records containing personal information. Device verification keys obtained by attackers could potentially be used to manufacture counterfeit devices capable of passing official website verification. Keystone will discontinue use of the legacy keys, destroy 18,835 devices in inventory that use the legacy keys, and suspend shipments of unfulfilled orders placed on its official website until devices using new keys enter production, after which shipments will resume. The retention period for customer personal information will be shortened from 180 days to 90 days. Keystone reminds users that devices using legacy verification keys received after October 20 cannot be fully ruled out as counterfeit risks even if they pass official website verification, and users should contact customer service for further verification.