Keystone reduced its customer data retention policy from 180 days to 90 days following the October 20, 2026 breach

Keystone disclosed on 26 October 2026 that its website breach exposed customer records and a device-authentication key. It will destroy 18,835 unsold devices using the old key and pause pending shipments; recovery phrases and wallet private keys were not exposed.