Foundation, a company that makes Bitcoin hardware wallets, is facing questions about customer data protection after spam emails appeared to originate from the company’s official domain. Foundation said the incident involved one or more compromised Cloudflare API keys.
Foundation announced that it had revoked the affected API keys and removed the malicious domain associated with the spam campaign. However, users are still asking whether their personal information was exposed, particularly in cases where customers had previously requested data deletion.
MAIN CONTENT
Foundation said it had revoked the compromised Cloudflare API keys and removed the malicious domain.
Users questioned why phishing emails still contained personal information, even though they had previously requested that their data be deleted.
The incident highlights the difference between protecting Bitcoin assets and safeguarding customers’ personal information.
Foundation addresses spam email incident linked to Cloudflare API keys
Foundation said the suspicious spam emails were linked to one or more compromised Cloudflare API keys, and confirmed that it had revoked the affected keys and removed the associated malicious domain.
In a statement on its official X account, the company also reassured users that their Bitcoin assets were safe. However, this response did not fully address concerns about whether customers’ personal information had been accessed or disclosed.
A compromised API key does not automatically prove that the customer database was accessed. There is currently not enough information to determine exactly what data may have been exposed or how personal information ended up in the phishing emails.
Users question how their personal data was exposed
Customers’ responses focused on the phishing emails containing accurate personal information, including in cases where users had previously asked Foundation to delete their data.
Jerry Gensler expressed disappointment on X after discovering that a phishing email still contained his personal information. He said he had requested the deletion of all his personal data and received confirmation that it had been permanently erased.
I’m a little disappointed. I took the time to email you and ask you to delete all of my personal data from Foundation’s systems. I received a response through a secondary email address used for confirmation and was assured that all my personal data had been permanently deleted. I don’t understand why this phishing email still contains all of my exact personal information?
Joe Turner of Arise Bitcoin also questioned the scope of the data that may have been affected, including customers’ names, home addresses, phone numbers, and shipping information.
How did the attackers obtain customers’ names, home addresses, phone numbers, and shipping information? The compromised Cloudflare API key alone does not explain this. Was the customer database breached, and is there any evidence to rule that out?
These questions have drawn more attention to Foundation’s data storage and deletion practices. However, the appearance of personal information in phishing emails is not enough to conclude that the customer database was breached.
The Foundation incident shows that security risks extend beyond Bitcoin wallets
Protecting Bitcoin assets and protecting personal data are two different security issues. A phishing email does not mean wallet keys have been exposed, but disclosed personal information can make phishing attacks more convincing.
For Bitcoin hardware wallet users, the incident underscores that securing the device holding their assets cannot replace the need for providers to protect customer information. If names, addresses, phone numbers, and shipping details are misused, they can enable targeted impersonation attacks.
Foundation needs to clarify how personal data appeared in the emails, determine whether the attackers accessed customer records, and address questions about data deletion requests. This information will help establish the actual scope of the incident.
Summary
Foundation said it had revoked the compromised Cloudflare API keys and removed the malicious domain associated with the spam email campaign. Although the company reassured users that their Bitcoin assets were safe, questions about the possible exposure of personal data remain unanswered. There is currently not enough evidence to conclude that the customer database was breached.
Source: https://tintucbitcoin.com/foundation-doi-mat-cau-hoi-ve-quyen-rieng-tu-sau-lo-khoa-api-cloudflare/
Thank you for reading this article!
Like, comment, and follow TinTucBitcoin to stay up to date with the latest cryptocurrency market news and never miss any important updates!
$BTC $ETH $BNB $XRP $SOL