Is Your Passport Wallet Safe? What Foundation Says About the Phishing Emails

Foundation, maker of the Bitcoin-only Passport hardware wallet, said phishing emails sent on Sunday falsely announced an urgent Passport recall from its own domains and were traced to one or more compromised Cloudflare API keys. The company said early Monday that it had revoked all such keys, taken down the malicious domain, and that Passport funds and hardware were not compromised. The messages linked to a fake site mimicking Foundation’s Envoy app and urged recipients to act. Some recipients said the emails included their names, phone numbers and home addresses from prior orders; Foundation has not said whether its customer database was breached and plans a full report.