Foundation Reports More Than 23,000 Phishing Email Attempts in Passport Wallet Security Incident

Foundation Passport hardware wallet security incident involving more than 23,000 reported phishing email attempts.

Foundation, the maker of the Passport hardware wallet, has identified more than 23,000 phishing email attempts in a security incident, according to Wu Blockchain. The company reported that the messages were distributed through multiple email services, including Mailgun and Google Workspace, while the number of affected users remains unknown.

The figures disclosed by Foundation include 19,057 phishing messages delivered through Mailgun and another 1,503 sent via Google Workspace. Together, these two categories account for 20,560 reported messages, leaving the total number of identified attempts above 23,000.

Number of Affected Users Remains Unknown

Although Foundation has identified a substantial volume of phishing attempts, the company has not established how many users were affected. The distinction matters because the number of messages does not necessarily correspond to the number of individual recipients or people who may have interacted with the phishing attempts.

The available information does not specify how the attackers markets obtained email addresses, what the messages contained, whether any recipients clicked malicious links, or whether any Passport wallet users suffered financial losses. Those details remain unconfirmed in the report shared by Wu Blockchain.

Phishing Risks for Hardware Wallet Users

Phishing attacks commonly attempt to deceive recipients into revealing sensitive information or taking actions that could compromise their accounts or digital assets. For cryptocurrency users, fraudulent emails may impersonate legitimate companies or services to encourage recipients to disclose wallet-related information.

However, the reported figures alone do not establish the precise method used in this incident or confirm that wallet devices themselves were compromised. The disclosed issue concerns phishing email attempts, and the number of affected users has not yet been determined.

Users who receive unexpected messages claiming to come from a wallet provider should independently verify the sender and avoid sharing recovery phrases or other sensitive wallet credentials. They should also exercise caution finance with links and attachments in unsolicited emails, particularly when a message creates urgency or requests confidential information.

Foundation's reported findings point to more than 23,000 identified phishing email attempts, including 19,057 messages sent through Mailgun and 1,503 through Google Workspace. The number of users affected by the incident remains unknown, according to Wu Blockchain.

Writer: Victoria Hale
Technology & Blockchain Writer

Victoria Hale writes about blockchain technology, digital infrastructure, and the intersection of emerging technologies with finance. Her articles explore how new protocols and systems are shaping the evolving digital economy.

She prioritises clarity and accuracy when explaining technical developments to a general audience.