Foundation Passport's domains compromised via Cloudflare API key breach; spam sent but no funds or devices affected.
Security & Exploits ·
Foundation, maker of Passport Bitcoin hardware wallets, discovered that spam emails were sent from its domains after one or more Cloudflare API keys were compromised. The company has revoked all affected API keys and taken down the malicious domain used in the spam campaign. Foundation stated that funds held on Passport devices remain secure and the hardware itself has not been compromised by the breach.
The incident appears limited to domain access rather than affecting the core wallet or user assets. Foundation is investigating the full scope of what occurred through the compromised API credentials and has committed to publishing a detailed report once the investigation concludes. No timeline for that report was specified, and details about how the API keys were initially compromised remain unclear.