Foundation warns Passport users after Cloudflare API key breach

Bitcoin hardware wallet maker Foundation has warned customers that attackers sent fraudulent emails appearing to originate from its official domains after compromising Cloudflare API keys, while maintaining that Passport devices and stored funds remain secure. Foundation reported that attackers sent fraudulent emails appearing to come from its official domains. The company revoked its Cloudflare API keys and took down the malicious domain. CEO Zach Herbert confirmed a backend infrastructure compromise and possible customer support inbox access. Foundation says Passport hardware and stored funds remain secure, with a detailed investigation underway. According to Foundation's October 26 security announcement, the company traced the unauthorized emails to one or more compromised Cloudflare API keys and revoked the credentials after learning of the incident.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to crypto.news.