# Keystone Says Store Breach Exposed Customer Data From Older Orders

By Simon Yoon

Canonical URL: https://www.tokenpost.com/news/technology/40711
Published: 2026-10-26T00:15:51.000Z
Updated: 2026-10-26T00:15:51.000Z
Section: Technology

> The company said payment details and wallet security credentials were not exposed; buyers described orders dating back two years.

Keystone said a hacker entered its Shopify-powered store on Oct. 20 and took customer names, contact information, shipping addresses and order details, including products and prices. Buyers described receiving breach notices tied to orders placed more than 180 days earlier, with one saying the order dated to 2024.

The company said payment card and bank details, recovery phrases, private keys and wallet passwords were not accessed. Keystone said it blocked the entry route, fixed the vulnerability and opened an investigation. It is contacting affected customers by email and plans to release a fuller report within several days. The company has not disclosed how many people were affected or identified the attacker.

The incident raises personal-security concerns beyond account privacy. User @PEPE_Whale69 said a caller impersonating Montreal police knew details of a 2024 Keystone order while trying to draw out personal information.

Keystone has promoted automatic deletion of shipping information after 180 days. Its privacy policy describes deleting order information for customers who have not placed another order within that period, while its help terms say city and country records remain and Shopify carries out the deletion.