Foundation investigation: identified over 23000 phishing email attempts; historical customer information is suspected to have been exposed
BIBIBI
AT A GLANCE
Foundation said it had discovered over 23000 phishing email attempts, and that copies of customer information remained in the old system.
Article
Foundation: identified over 23000 phishing email delivery attempts; customer information is suspected to have been exposed
PANews October 27 reported that Foundation, the developer of the hardware wallet Passport, released an update on its security incident investigation, stating that it had identified more than 23000 phishing email attempts in its email system, of which 19057 were sent through Mailgun and 1503 were sent through Google Workspace. Some addresses received multiple emails, while some attempts failed or were intercepted before delivery. These figures do not represent the number of people whose personal information was exposed. Foundation is still verifying the matter and will make further announcements. The investigation found that its former WooCommerce store had inadequate data sanitization. Although historical orders appeared redacted in the back end, copies of customers’ personal information remained in old tables after the database migration; similar data was also present in refund records and abandoned shopping carts. These records were located in systems accessible to the attacker. In addition, this year May...
Key points
01
Foundation said it had identified more than 23000 phishing email attempts in its email system.
02
Of these, 19057 were sent through Mailgun, and 1503 were sent through Google Workspace.
03
Some attempts failed or were intercepted before delivery; the number of attempts does not represent the number of people whose personal information was exposed.
04
former WooCommerce store had inadequate data sanitization, and copies of customers’ personal information remained in old tables, refund records, and abandoned shopping carts.
05
These records were located in systems accessible to the attacker.
AI-assisted interpretation
The following is analysis, separate from reported facts. Verify important claims independently.
The incident involved phishing email attempts and copies of customer information in an old database, but Foundation is still confirming the actual scope of impact.
Why it matters to readers
Copies of customer information were located in systems accessible to the attacker; whether the data was actually accessed or exposed remains to be confirmed.
Phishing emails are typically used to induce recipients to click links or provide information; this incident also involved issues with the handling of historical order data.
Risks and unknowns
Foundation has not yet confirmed the actual number of people whose personal information was exposed.
It remains unclear whether the attacker accessed or exfiltrated the relevant historical data.
The evidence text is truncated at “this year May”, and subsequent investigation information is incomplete.
The provided evidence does not state whether the Passport device or private keys were affected.
Related Developments
Loading event timeline…
Related concepts
Phishing emails
This term is not in the glossary yet. Browse related concepts in the glossary.
