If you own a Foundation hardware wallet, you may have received an email in recent days that looked like mail from the manufacturer: correct sender domain, correct name, correct greeting. It was not. Foundation, the US maker of the Passport bitcoin wallet, admitted in a customer letter dated October 29, 2026 that attackers had gained access to part of its backend infrastructure and sent phishing emails from there. According to the manufacturer, the device in your drawer is not affected. Your address and phone number may well be.
This is the fourth case of its kind within three months, and the pattern repeats itself: the target is not the wallet but the shop that sells it, the provider that ships it or the mail system that writes to customers. What leaks cannot be recovered or replaced. A home address remains a home address.
Foundation cites 23,000 phishing attempts and two delivery channels
In the letter Foundation sent to customers on October 29, 2026, which can be read on its community forum, the company cites more than 23,000 phishing email attempts. By its own count, 19,057 of these went through the email delivery service Mailgun and 1,503 through Google Workspace. Both are systems ...
English (US)