Disclaimer: The opinions expressed by our writers are their own and do not represent the views of U.Today. The financial and market information provided on U.Today is intended for informational purposes only. U.Today is not liable for any financial losses incurred while trading cryptocurrencies. Conduct your own research by contacting financial experts before making any investment decisions. We believe that all content is accurate as of the date of publication, but certain offers mentioned may no longer be available.
Dogecoin holders have received a security warning after hardware wallet provider Keystone disclosed a data breach, and vocal community member Mishaboar cautioned users to prepare for potential phishing attempts targeting cryptocurrency holders.
In a recent X post, hardware wallet provider Keystone issued a public apology to users, saying it detected unauthorized access to its official website on October 20, 2026. After reviewing API activity with Shopify, it was confirmed on October 23, 2026 that a third party had obtained customer shipping information.
"You trusted us with those details, and we're sorry we didn't keep them safe," Keystone wrote.
Keystone hardware wallet supports major cryptocurrencies, including Dogecoin (DOGE), Bitcoin (BTC), Ethereum (ETH) and Solana (SOL) among other coins.
The exposed data includes names, contact details, shipping addresses, and order details (items and prices). It clarified that payment card and bank details, wallet recovery phrases, private keys and wallet passwords were not exposed in the incident. Keystone said it had blocked the unauthorized access, fixed the vulnerability and launched an investigation. The company is also emailing affected customers, with a more detailed report to follow.
In the wake of the data breach, the wallet provider warned the crypto community that scammers may pose as Keystone by phone, text, email, or mail, offering refunds, replacement devices, or "fixes" for their orders or addresses, adding that "None of it is from us."
Users are urged never to share their recovery phrase or private keys and never to enter their recovery phrases into a device they did not order, as Keystone will never ask for such details. Also, they should not click links in unexpected messages and should only trust official channels.
Warning reiterated to Dogecoin community
Reacting to the disclosure, Dogecoin community member Mishaboar warned that affected customers could face targeted phishing attempts through emails, text messages, phone calls and potentially even physical mail.
"Expect targeted phishing emails, texts, phone calls. Possibly even physical mail (it has happened with Trezor and Ledger)," Mishaboar wrote.
The exposure of shipping addresses could reveal users' home addresses, potentially making them targets for scams.
Mishaboar urged users to avoid revealing further information about themselves or their family on social media. He also reiterated that they should never share their recovery phrases with anybody or trust unsolicited offers of replacement devices.
Arman Shirinyan
Dan Burgin
