# Foundation Confirms Attackers Accessed Shopify Store in Passport Incident By Simon Yoon Canonical URL: https://www.tokenpost.com/news/technology/47283 Published: 2026-11-03T04:20:07.000Z Updated: 2026-11-03T04:20:07.000Z Section: Technology > CEO Zach Herbert did not specify what information attackers reached. Information connected to Shopify orders had earlier been considered potentially exposed. Foundation CEO Zach Herbert confirmed Oct. 30 that attackers accessed the Shopify store during a phishing incident involving Passport, the company’s hardware wallet for Bitcoin (BTC). He did not specify what information attackers reached or whether they copied it. “Yes our Shopify was accessed as well,” Herbert wrote. Information connected to Shopify orders had earlier been considered potentially exposed. [More than 23,000 phishing email attempts]() were recorded across the company’s email systems on Oct. 26. The figure counts attempts; it is not a confirmed total of delivered messages or unique recipients. Some addresses received multiple messages, while some attempts failed or were stopped before delivery. Records containing names, email addresses, about 5,600 mailing addresses and 5,200 phone numbers were in systems attackers could reach across the former WooCommerce store and current Shopify store. Whether attackers accessed every record remained unknown, and the records were treated as potentially exposed. Phishing messages reached more than 5,000 email addresses absent from Foundation’s store records; their origin remained under investigation. On Oct. 30, Foundation also warned of new phishing waves sent through hacked domains belonging to other companies. Foundation described the emails as designed to obtain recipients’ recovery phrases and said it had found no evidence that Passport devices or their private keys were compromised. ## Links in this article - [More than 23,000 phishing email attempts](https://www.tokenpost.com/news/technology/41502)