# Foundation Finds More Than 23,000 Phishing Email Attempts

By Simon Yoon

Canonical URL: https://www.tokenpost.com/news/technology/41502
Published: 2026-10-27T01:01:51.000Z
Updated: 2026-10-27T01:01:51.000Z
Section: Technology

> The count does not represent affected customers. An investigation also found customer records in legacy store systems accessible to an attacker.

Foundation, maker of Passport hardware wallets, has identified more than 23,000 phishing email attempts while investigating possible customer information exposure in systems used by its online stores.

The attempt count is not a count of affected customers: some addresses received multiple messages, and some emails failed or were blocked before delivery. Foundation has not completed its review and plans to provide more information.

The investigation found that copies of customer details remained in older WooCommerce database tables even though past orders appeared anonymized in the store’s administrative system. Similar information was present in refund records and abandoned carts, and those records were on systems accessible to an attacker. Customer information tied to orders placed after Foundation moved to Shopify in May may also have been exposed; those orders had not been manually anonymized, and an automatic deletion tool was not active at the time.

Foundation revoked affected email credentials, removed phishing messages that had not been sent and shut down related legacy services. The company said it has found no evidence that Passport devices or their private keys were affected.