Hardware Wallet Maker Foundation Faces Customer Data Breach

Attackers hijacked Foundation’s email infrastructure and sent fake hardware-wallet recall notices containing customers’ real names, addresses and purchase details. The company says it expelled the intruders within ten minutes of user reports, but the personal information raises troubling questions. Boston-based hardware-wallet manufacturer Foundation disclosed the incident late Oct. 25, explaining that compromised Cloudflare API keys allowed attackers to send messages appearing to originate from its official domains. The emails warned Passport owners of an urgent product recall, claiming compromised display components exposed their bitcoin to theft.