Foundation warns Passport users after Cloudflare API key breach

Passport Wallet Maker Foundation Traces Phishing Emails to Backend Breach, Promises Report

Foundation first pointed to compromised Cloudflare API keys, then its CEO said attackers got in through a self-hosted app and likely reached the customer support inbox.

Foundation warns Passport users after Cloudflare API key breach

Foundation warns Passport owners after compromised Cloudflare API keys enabled fraudulent emails from official domains, while hardware and funds remain secure.

Hardware Wallet Maker Foundation Faces Customer Data Breach

Attackers hijacked Foundation’s email infrastructure and sent fake hardware-wallet recall notices containing customers’ real names, addresses and purchase details. The company says it expelled the intruders within ten minutes of user reports, but the personal information raises troubling questions. Compromised API Keys Turned Official Emails Into Phishing Bait Boston-based hardware-wallet manufacturer Foundation disclosed the incident […]

Foundation Warns Passport Bitcoin Wallet Users After Cloudflare API Key Breach

TLDR Foundation says attackers sent fake emails from its official domains after compromising Cloudflare API keys. The company revoked the keys and took down the malicious domain linked in the emails. CEO Zach Herbert said attackers likely accessed the customer support inbox through a flaw in a self-hosted app. Foundation says Passport hardware and the [...]

Foundation Passport Users Targeted by Fake Wallet Recall Phishing Emails

Foundation has warned Passport hardware wallet users about phishing emails impersonating the company and falsely claiming a critical supply-chain vulnerability that could allow attackers to steal cryptocurrency from affected devices. The fraudulent messages, circulating on October 25, 2026, urge recipients to visit a counterfeit recall website and submit their 12-word recovery phrases under the pretense… Continue reading Foundation Passport User…