Keystone stated that the WebAuth key stolen in the October 20 breach does not play a role in generating recovery phrases, deriving private keys, or signing cryptocurrency transactions

From the articleKeystone Halts Web Orders, Will Junk 18,835 Wallets in Stock Over Stolen Authenticity Key - UnchainedAlso in Crypto wallet maker Keystone is destroying nearly 19,000 devices after a major security breach