Keystone admits 180-day deletion failed as OneKey undercuts it with 30 days 

Keystone reduced its shipping-data retention from 180 days to 90 days, effective immediately on Friday, after admitting its automatic 180-day deletion had failed and left personal information on 25,964 buyer records vulnerable. The company said a review of 51,083 buyer records found overdue data including names, contact details, shipping addresses and purchase histories. Competitor OneKey imposed a 30-day retention cap, announced October 27 by founder Yishi Wang as a precaution. Keystone also said it would scrap 18,835 unsold devices after an October 20 breach in which a WebAuth key, a factory-burned code proving a device is genuine, was stolen.