Foundation Passport Users Get Phishing Emails With Real Purchase Details

TLDR Foundation, maker of Passport Bitcoin hardware wallets, traced phishing emails to compromised Cloudflare API keys. The company revoked all API keys and took down the malicious domain on Oct. 25. Foundation says Passport funds and hardware are safe. Recipients reported emails with names, addresses and past purchase details. A former job applicant also got a phishing email, so the issue may reach beyond customers. Foundation, the maker of Passport Bitcoin hardware wallets, said Sunday that it traced phishing emails to one or more compromised Cloudflare API keys. The emails appeared to come from the company’s official domains.