Odaily Planet Daily reports that Bitcoin News posted on X that Foundation Devices stated attackers launched over 23,000 phishing attempts targeting its hardware wallet customers by exploiting customer records the company believed had been deleted but were still retained in historical database tables. Investigators confirmed that 19,057 emails were sent via Mailgun and an additional 1,503 via Google Workspace; the number of affected customers remains undetermined.
Foundation Devices stated that after the migration of the legacy WooCommerce database, customer names, shipping information, refund records, and incomplete checkout data from the old tables remain accessible; recent Shopify order information may also have been exposed. The company said there is currently no evidence that Passport hardware wallets or their private keys have been compromised, and the investigation is ongoing.

