Foundation, known for its Bitcoin hardware wallets, announced that it had been targeted by spam email attacks that appeared to originate from its official domains.
Cause of the attack
The company said the emails were linked to one or more compromised Cloudflare API keys. In response, Foundation revoked all affected API keys and took down the malicious domain used in the campaign.
User concerns
Customers have raised concerns about the possible exposure of personal information, especially for those who previously requested data deletion. One user reported receiving a phishing email that still contained his personal details despite having asked for their removal. Another user asked how attackers could obtain names, residential addresses, phone numbers and delivery details, noting that compromised API keys alone do not explain the level of detail in the phishing messages.
Impact on security
Foundation emphasized that the incident does not affect the security of Bitcoin assets stored on its hardware wallets, but acknowledged that leaked personal data can make phishing attempts more convincing. The company said it will investigate whether its customer database was accessed and will provide evidence to address the concerns.
Company response
Foundation confirmed the revocation of the compromised API keys and the removal of the malicious domain. It also reassured users that the security of their Bitcoin holdings remains intact while it continues to examine the breach and its implications for data privacy.
