Passport Wallet Maker Foundation Reports Customer Data Exposure

Foundation, which makes the Passport hardware wallet, has confirmed that phishing emails sent from its official domains were traced back to compromised Cloudflare API keys. It also said that customer records were in systems that the attackers could reach, but it has so far found no evidence that Passport devices or their private keys had been affected. What the Investigation Has Found So Far The company first made the public aware of what was going on in an announcement on X yesterday, saying that spam emails had been sent to users and they appeared to have come from official Foundation domains. It further pointed out that it had traced the issue to at least one compromised API key on Cloudflare.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to CryptoPotato.