Foundation Details Partial Breakdown of 23,000-Plus Phishing Attempts

Foundation has identified more than 23,000 phishing email attempts and now lists counts for two services that account for only part of the total in its security review.

The breakdown includes 19,057 attempts through Mailgun and 1,503 through Google Workspace, a combined 20,560. Some messages were not delivered. The two service counts do not cover the full reported total.

Foundation's investigation also found customer information in older WooCommerce records that appeared masked in its administrative system but remained in database tables after a migration. Similar information was present in refund records and incomplete-order carts. Customer details tied to orders placed after the company moved to Shopify in May 2026 may also have been exposed; the number of affected customers remains under investigation.

Foundation revoked the affected email credentials and shut down related legacy services. It said it has found no evidence that Passport devices or the private keys stored on them were affected. The company previously detailed its investigation into possible customer data exposure.