[Keystone Website Vulnerability Leaks Hardware Wallet Buyers' Shipping Addresses] Odaily Planet Daily reports that crypto hardware wallet maker Keystone disclosed a security vulnerability on its website, allowing an unauthorized third party to access customer names, contact information, shipping addresses, and order details. Keystone stated that it has blocked access, patched the vulnerability, and launched an investigation, while also notifying affected customers, but did not disclose the number of affected customers. Security researcher Taylor Monahan warned that the leaked shipping addresses could expose customers to targeted scams and personal attacks. Keystone stated in 2023 that it would shorten the customer data retention period to 180 days, but some customers reported receiving notifications of the breach more than two years after purchasing their devices. (Cointelegraph)