According to The Defiant, Foundation is investigating a connection between phishing emails received by some users and the compromise of certain Cloudflare API keys. The investigation concerns emails that prompted recipients to provide personal information and purchase details. Foundation confirmed that its Passport hardware devices remain secure and that no funds associated with these devices were accessed or moved.
The company did not specify how many users received the emails, nor provide technical details about the API keys involved. It stated only that Passport hardware and related financial assets are intact and unaffected by the incident. The focus of the review is on verifying whether the phishing attempts directly enabled access to Cloudflare API keys used by Foundation.
No further statements were made regarding timelines for completing the investigation, response actions beyond verification, or changes to user authentication practices at this time.
