Foundation Says Cloudflare Key Leak Enabled Malicious Emails From Its Domain

Foundation, the maker of the Passport Bitcoin hardware wallet, said attackers used its official domain to send malicious emails after one or more of its Cloudflare API keys were exposed. The company’s initial investigation traced the incident to the leaked credentials. Foundation said it revoked all related API keys and shut down the malicious domain included in the phishing emails. It also said Passport hardware wallets were not compromised and that cryptocurrency stored on the devices remains safe. The exposed credentials were Cloudflare API keys, while Passport is Foundation’s Bitcoin hardware wallet. Foundation’s investigation is continuing.