Foundation hack exposes 21463 customer emails in phishing campaign

Bitcoin hardware wallet maker Foundation disclosed a system breach that exposed customer information after hackers exploited vulnerabilities in its self-hosted Cal.com booking system and Bank-Vaults. The attack began on Oct. 21, with hackers attempting to send over 23000 phishing emails through Foundation’s official email address on Oct. 25, targeting 21463 email addresses. Exposed data included customer names, addresses, phone numbers, order histories, and partial payment card information. The stolen data was later used in phone scams to seek victims’ Bitcoin seed recovery phrases. Foundation confirmed that employee accounts and devices were not compromised and that assets stored in its Passport hardware wallet remain safe. The company plans to reduce its use of self-hosted servers and shift to externally managed services.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.