Foundation Ties Passport Phishing Emails to Compromised Cloudflare API Keys

The detail that matters here is the vector: compromised Cloudflare API keys, not a breach of Passport hardware, which shifts the exposure from device security to the third-party infrastructure that sends official-looking mail. Because the phishing messages carried real personal and purchase details, the credibility problem outlasts the technical fix — recipients now have reason to distrust genuine Foundation communications. The open question is whether the Foundation discloses how the keys were compromised and whether the same infrastructure gap affects other wallet vendors relying on similar providers.