Foundation: The system was hacked, and 21,463 email addresses were targeted

The hardware wallet manufacturer Foundation stated that attackers exploited a vulnerability in its self-hosted Cal.com appointment software, and then used another vulnerability in Bank-Vaults to steal credentials, accessing customer records, email systems, and domain settings.

The intrusion began on October 21; on October 25, the attackers attempted to send over 23,000 phishing emails from Foundation's real email address, targeting 21,463 email addresses. The leaked information included names, home addresses, phone numbers, order records, customer service communications, and some payment card information. The scammers subsequently used the stolen purchase and payment information to call customers, tricking them into providing Bitcoin wallet recovery phrases. Foundation stated that employee accounts and devices were not compromised, funds stored in Passport devices are safe, and it will reduce self-hosted infrastructure, shifting to managed services.