[Foundation's Disclosure System Hacked, 21,463 Email Addresses Targeted] Odaily Planet Daily reports that Bitcoin News, in an article published on the X platform, stated that hardware wallet manufacturer Foundation claims attackers exploited a vulnerability in its self-hosted (Cal.com) appointment software, and subsequently used another vulnerability in its Bank-Vaults to steal credentials, gaining access to customer records, email systems, and domain settings. The intrusion began on October 21st; on October 25th, attackers attempted to send over 23,000 phishing emails from Foundation's legitimate email addresses, targeting 21,463 email addresses. The leaked information included names, home addresses, phone numbers, order records, customer service communications, and partial payment card information; the scammers then used the stolen purchase and payment information to call customers, tricking them into providing their Bitcoin wallet mnemonic phrases. Foundation stated that employee accounts and devices were unaffected, funds stored in Passport devices are safe, and it will reduce its self-hosted infrastructure and shift to custodial services.