Hardware wallet Passport developer: Over 23,000 phishing email attempts detected, customer information suspected to be leaked

October 27: Foundation, the developer of the hardware wallet Passport, released an update on its security incident investigation, stating that over 23,000 phishing email attempts have been identified, of which 19,057 were delivered via Mailgun and 1,503 were sent through Google Workspace; some emails failed to reach recipients, and the actual number of affected users is still under investigation.

The investigation found that when Foundation previously used WooCommerce, although historical orders appeared redacted in the backend, legacy data tables left over after the database migration still retained customers' personal information, and similar issues existed in refund records and shopping carts of incomplete orders. In addition, customer information from new orders after the migration to Shopify in May this year may also have been leaked. Foundation stated that the affected email credentials have been revoked and the relevant legacy services shut down, and there is currently no evidence that Passport devices or the private keys stored in them have been affected.