Foundation warns Passport users after Cloudflare API key breach

Bitcoin hardware wallet maker Foundation has warned customers that attackers sent fraudulent emails appearing to originate from its official domains after compromising Cloudflare API keys, while maintaining that Passport devices and stored funds remain secure. Foundation reported that attackers sent fraudulent emails appearing to come from its official domains. The company revoked its Cloudflare API keys and took down the malicious domain. CEO Zach Herbert confirmed a backend infrastructure compromise and possible customer support inbox access. Foundation says Passport hardware and stored funds remain secure, with a detailed investigation underway.

Also reported by TheCoinrise.

Source: crypto.news