According to Unchained, Keystone disclosed that an intruder gained access to its public website and obtained customer names and addresses. The incident was identified by the company and involves data collected through publicly accessible parts of its site.
Keystone confirmed that the intruder accessed information stored on the website itself, specifically names and addresses provided by users via visible fields. The company did not specify how the access occurred, nor provide details about the method used, timeline beyond identification after discovery, or technical response steps in the report.
No indication was given that financial data, login credentials, or additional personal information beyond names and addresses were accessed. Keystone stated it is reviewing website security practices and will take appropriate measures. The company did not mention notifying affected customers at this stage.
The finding reflects a breach of confidentiality for customer contact details hosted on the site. Industry practice typically involves assessing exposure risk, evaluating mitigation needs, and considering disclosure or notification where affected parties may be impacted.
