Foundation reveals phishing campaign aimed at Passport hardware wallet owners

Foundation, the maker of the Passport hardware wallet, found more than 23,000 phishing emails sent through its own mail systems. Attackers had tapped into old customer records to trick users into handing over recovery phrases.

The exposed information came from WooCommerce orders placed before the May 2026 switch to Shopify. Roughly 5,600 email addresses and 5,200 phone numbers remained in outdated tables that were never properly cleaned.

No Passport devices or private keys were compromised. The company stressed that the only real protection is never entering a seed phrase on any website or in reply to an email, regardless of how legitimate it appears.

Based on information from cryptonews.net