Foundation Bitcoin Wallet Phishing Breach Exposes Support Inbox
Foundation, maker of the Passport Bitcoin hardware wallet, disclosed that attackers exploited compromised Cloudflare API keys and backend infrastructure to send phishing emails from addresses that appeared to use its official domains. The emails linked to a malicious site designed to steal recovery phrases. Foundation revoked the keys and stopped the unauthorized email activity after customer reports; its CEO said a vulnerability in a self-hosted application may have allowed access to the customer support inbox. Some messages reportedly included names, mailing addresses or phone numbers, but the source of that information remains under investigation. Foundation has not confirmed a full customer database breach, disclosed how many people were targeted, or said whether any recovery phrases were exposed. It said Passport devices and funds remain safe and plans to publish a formal incident report. The incident is a cybersecurity risk for Foundation users, not evidence that Bitcoin or hardware-wallet private keys were compromised. Users should avoid suspicious links and never share or enter a recovery phrase in response to an email.
Neutral
The incident does not indicate that Bitcoin itself, Passport devices or users’ stored funds were compromised, so there is no direct change to Bitcoin’s supply, network operation or fundamentals. The immediate market effect on BTC is therefore likely to be limited. Short-term, the report could prompt some traders to react to broader concerns about wallet security, phishing and custody, potentially causing brief risk aversion or volatility. However, such reactions are more likely to affect sentiment than Bitcoin’s price unless evidence emerges that recovery phrases or funds were stolen at scale. Longer term, a formal incident report and confirmation that the breach was contained could reassure users. If investigations instead reveal substantial customer-data exposure or asset losses, confidence in wallet providers could weaken and add temporary selling pressure, though that would remain an indirect effect on BTC rather than a Bitcoin protocol issue.