Hardware Wallet Maker Foundation Faces Customer Data Breach

Attackers hijacked Foundation’s email infrastructure and sent fake hardware-wallet recall notices containing customers’ real names, addresses and purchase details. The company says it expelled the intruders within ten minutes of user reports, but the personal information raises troubling questions. Boston-based hardware-wallet manufacturer Foundation disclosed the incident late Oct. 25, explaining that compromised Cloudflare API keys allowed attackers to send messages appearing to originate from its official domains. The emails warned Passport owners of an urgent product recall, claiming compromised display components exposed their bitcoin to theft. Recipients were directed to a counterfeit website resembling Foundation’s Envoy companion app, where attackers attempted to obtain recovery phrases or persuade victims to transfer funds.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to Bitcoin.com News.