Odaily: Bitcoin News posted on X that hardware wallet manufacturer Foundation stated that attackers exploited a vulnerability in its self-hosted Cal.com booking software, then leveraged another vulnerability in Bank-Vaults to steal credentials and access customer records, email systems, and domain settings. The breach began on October 21; on October 25, attackers attempted to send over 23,000 phishing emails from Foundation's real email addresses, targeting 21,463 email addresses. The leaked information includes names, home addresses, phone numbers, order records, customer service communications, and some payment card information; scammers subsequently used the stolen purchase and payment information to call customers and trick them into providing their Bitcoin wallet mnemonic phrases. Foundation stated that employee accounts and devices were not compromised, funds stored in Passport devices remain safe, and it will reduce self-hosted infrastructure and shift toward hosted services.
