# Foundation Says Phishing Attempt Targeted 21,463 Email Addresses

By Simon Yoon

Canonical URL: https://www.tokenpost.com/news/technology/51504
Published: 2026-11-08T09:39:18.000Z
Updated: 2026-11-08T09:39:18.000Z
Section: Technology

> Foundation said attackers accessed customer records, email systems and domain settings. Scammers later called customers seeking Bitcoin (BTC) wallet seed phrases.

Foundation said attackers exploited flaws in its self-hosted Cal.com scheduling software and in Bank-Vaults to reach customer records, email systems and domain settings, then tried to send more than 23,000 phishing messages targeting 21,463 addresses.

The company said the intrusion began Oct. 21. On Oct. 25, attackers attempted to send the messages from a Foundation email address.

Foundation said the attackers used a vulnerability in its self-hosted Cal.com scheduling software, then exploited a separate flaw in Bank-Vaults to steal credentials. The information exposed included names, home addresses, phone numbers, order records, customer service messages and some payment card details.

Scammers later used stolen purchase and payment details to call customers and try to obtain their Bitcoin (BTC) wallet seed phrases, Foundation said. The company said employee accounts and devices were not compromised and funds stored on Passport devices remained safe. Foundation plans to reduce its use of self-hosted infrastructure and move to managed services.