Foundation Passport: Phishing Emails Linked to Compromised Cloudflare API Keys
Foundation disclosed that compromised Cloudflare API keys enabled fraudulent emails impersonating the company and reaching Passport users with personal and purchase details. The company confirmed that Passport hardware and user funds remained secure despite the breach.
Written by CoinArticle’s AI Newsroom · from 2 cited sources. How we work
How the Breach Occurred
Foundation traced a phishing campaign targeting Passport users to compromised Cloudflare API keys that allowed attackers to send emails appearing to originate from official Foundation domains. Recipients reported receiving messages containing personal information and purchase history, suggesting the attackers had access to user data beyond email credentials alone.
What Remained Secure
Foundation stated that Passport hardware devices and customer funds were not compromised by the breach. The company's assurance focused on the integrity of the physical security key and the blockchain assets it protects, distinguishing the API credential compromise from a broader attack on the core product or user wallets.
Notification and Response
The company issued a warning to Passport owners following discovery of the compromised keys. Foundation did not disclose the number of users affected, the duration the keys were exposed, or details of its remediation timeline beyond confirming the API credentials were invalidated.
Why It Matters
For Traders
Passport user confidence may deteriorate if phishing campaigns persist; monitor social channels for reports of fund loss claims or further suspicious emails.
For Investors
Third-party service dependencies (Cloudflare) introduce operational risk even when core assets remain secure; credential hygiene becomes a material liability for hardware wallet providers.
For Builders
Integrations with external API providers require strict key rotation, audit logging, and incident response protocols; consider how your authentication layer handles compromised third-party credentials.
This article is for information only and is not financial advice. Read the full disclaimer.
