According to CoinMeta, a leak from the historical database of Foundation Devices led to over 23,000 phishing email attacks targeting hardware wallet customers. Of these, 19,057 emails were sent through Mailgun and 1,503 through Google Workspace. After the migration of the old version of the WooCommerce database, customer names, delivery information, refund records, and unfinished checkout details became accessible, and it is possible that recent Shopify order information has also been exposed. The Passport hardware wallets and private keys were not affected.