Reporting says hardware-wallet maker Foundation identified more than 23,000 phishing-email attempts through its email systems. Messages posed as security notices and directed users to external sites requesting recovery phrases. The company says it has found no evidence of compromised Passport devices or private keys, while the number of customers with exposed data remains under investigation. Older shopping-system migrations reportedly left duplicate records despite apparent deletion. Credentials were revoked, queued messages removed and affected services disabled. Users must not submit recovery phrases even when an email appears official.