Passport Wallet Maker Foundation Reports Customer Data Exposure

It also said that customer records were in systems that the attackers could reach, but it has so far found no evidence that Passport devices or their private keys had been affected. What the Investigation Has Found So Far The company first made the public aware of what was going on in an announcement on X yesterday, saying that spam emails had been sent to users and they appeared to have come from official Foundation domains.

It further pointed out that it had traced the issue to at least one compromised API key on Cloudflare. Following that discovery, it revoked all API keys and took down the malicious domain in the spam emails.

Interestingly, only days earlier, Foundation had cautioned followers on the social platform that their email accounts were likely to be their "single biggest point of failure" as far as their digital security was concerned. It advised users to secure their emails with strong and unique passwords, as well as to use different addresses for important accounts and have passkeys or authentication backed by hardware whenever available.