Passport Wallet Maker Foundation Reports Customer Data Exposure

The company counted more than 23,000 phishing email attempts but said that total does not establish how many customers' info was exposed. Foundation, which makes the Passport hardware wallet, has confirmed that phishing emails sent from its official domains were traced back to compromised Cloudflare API keys. It also said that customer records were in systems that the attackers could reach, but it has so far found no evidence that Passport devices or their private keys had been affected. What the Investigation Has Found So Far The company first made the public aware of what was going on in an announcement on X yesterday, saying that spam emails had been sent to users and they appeared to have come from official Foundation domains. It further pointed out that it had traced the issue to at least one compromised API key on Cloudflare. Following that discovery, it revoked all API keys and took down the malicious domain in the spam emails. Interestingly, only days earlier, Foundation had cautioned followers on the social platform that their email accounts were likely to be their “single biggest point of failure” as far as their digital security was concerned. It advised users to secure ...