Keystone reduced its customer data retention policy from 180 days to 90 days following the October 20, 2026 breach