[CLSTR]
API
< Back to situations

Monitor this situation.

[SITUATION] · [QUIET] · [TECHNOLOGY]

2 clusters · 9 sources · 1 days · First seen · Last updated

Foundation Passport hardware wallet security breach

Overview

A security incident at Foundation, the manufacturer of the Passport Bitcoin hardware wallet, resulted in the compromise of its email infrastructure and customer data. Attackers gained access to the company’s customer support inbox through compromised Cloudflare API keys and a vulnerability in a self-hosted application.

The breach led to the distribution of phishing emails, with reports indicating approximately 23,000 phishing attempts were sent via services such as Mailgun and Google Workspace. These fraudulent messages often used the guise of product recalls to target users. While customer records, including names, addresses, and phone numbers, were potentially exposed—including legacy data from a previous WooCommerce setup—Foundation stated there is no evidence that Passport hardware devices or private keys have been affected.

Entities

Cloudflare · Foundation · Zach Herbert · Check Point Software · Microsoft

Timeline

  1. [TECHNOLOGY] 3 sources
    Foundation reports data exposure and 23,000 phishing emails

    Foundation, maker of the Passport hardware wallet, reported over 23,000 phishing emails following a breach of its Cloudflare API keys and backend infrastructure. No private keys were compromised.

  2. [TECHNOLOGY] 6 sources
    Phishing campaigns target organizations and hardware wallet users

    Global phishing campaigns are targeting 40,000 organizations via fake Microsoft Teams invites, while the Foundation hardware wallet manufacturer reports a data breach affecting customer contact info.

Sources

ambcrypto.com · atarde.com.br · canaltech.com.br · chemanalyst.com · criptonoticias.com.br · extra.globo.com · infoguerra.com.br · itsection.com.br · rande-academy.cz