Hardware Wallet Maker Foundation Hacked, 21,463 Emails Targeted

Cointime update: Hardware wallet manufacturer Foundation disclosed a system breach that began on Oct. 21, with attackers exploiting a flaw in its self-hosted Cal.com booking software and a second vulnerability in Bank-Vaults to steal credentials and access customer records, email systems and domain settings. On Oct. 25 the attackers attempted to send more than 23,000 phishing emails from Foundation’s real address to 21,463 email addresses. Leaked data includes names, home addresses, phone numbers, order records and partial payment card details; Foundation said Passport device funds are safe and it will shift to hosted services.