Foundation warns Passport users after Cloudflare API key breach

Bitcoin hardware wallet maker Foundation has warned customers that attackers sent fraudulent emails appearing to originate from its official domains after compromising Cloudflare API keys, while maintaining that Passport devices and stored funds remain secure. Summary Foundation reported that attackers sent fraudulent emails appearing to come from its official domains. The company revoked its Cloudflare API keys and took down the malicious domain. CEO Zach Herbert confirmed a backend infrastructure compromise and possible customer support inbox access. Foundation says Passport hardware and stored funds remain secure, with a detailed investigation underway. According to Foundation’s October 26 security announcement, the company traced the unauthorized emails to one or more compromised Cloudflare API keys and revoked the credentials after learning of the incident. Its co-founder and CEO, Zach Herbert, subsequently disclosed that attackers had gained access to parts of the company’s backend infrastructure through a vulnerability in a self-hosted application. The investigation is examining whether customer support communications and personal information were exposed. Foundation confirm...