Keystone reports customer data breach via Shopify store
Summary
Keystone, a hardware wallet maker, announced that an attacker gained access to sensitive customer information, including names, addresses, and order details, through its Shopify store. Although Keystone states it deletes shipping data after 180 days, some customers report being targeted based on older orders, raising concerns about data retention and privacy in the wake of security incidents. E-commerce platforms, like Shopify, emphasize merchant account protections to help mitigate unauthorized data access.
Analysis
Shopify: Shopify operates a leading e-commerce platform that enables businesses to create and manage online stores. Customer data from Keystone was accessed via the integration with its platform, highlighting third-party store security considerations. Keystone: Keystone manufactures hardware wallets designed for secure cryptocurrency storage and transactions. The company experienced unauthorized access to customer names, addresses, and order details through its Shopify store, prompting statements about its data retention practices. Data Retention: Hardware wallet providers communicate policies on retaining customer shipping information to address privacy concerns following incidents. E-commerce Security: E-commerce platforms emphasize merchant account protections and updates to safeguard against unauthorized data access.
Categories
techcrypto