Hacking News
Foundation Finds 23,000 Phishing Attempts
Foundation, the company behind Passport Bitcoin wallet, identified more than 23,000 phishing email attempts linked to exposed customer information. The incident involved compromised Cloudflare API keys and older store system data, which may have included names, addresses, and contact details. Foundation reported 19,057 emails delivered through Mailgun and 1,503 through Google Workspace. The company is investigating historical Shopify and customer support records, and is investigating whether attackers accessed Passport devices or stole private keys. However, phishing emails used customer information to appear legitimate and potentially trick recipients into revealing wallet recovery phrases.