Foundation revokes compromised Cloudflare API keys; malicious domain taken down
Foundation said its official domain had been used to send spam, stemming from one or more compromised Cloudflare API keys. The relevant keys have been revoked, the malicious domain has been taken down, and Passport devices and the funds in them were not affected.