Blockchain

Foundation Links Passport Phishing Emails to Compromised Cloudflare API Keys

Read full article at source ↗

Based on a feed excerpt; full article content has not been acquired. Source evidence retrieved 26/10/2026, 04:12:25 UTC.

Briefings

A security breach occurred where compromised Cloudflare API keys were linked to phishing emails containing personal and purchase details. The company stated that the actual hardware and funds remained safe. This incident occurred in October 2026, with recipients reporting the compromised data.

Key points

• Passport phishing emails were successfully linked to compromised Cloudflare API keys, allowing recipients to receive messages with personal and purchase details.
• The company explicitly stated that the actual hardware and funds used by the attackers were safe from the breach.

Context

This incident represents a critical security failure where compromised API keys enabled phishing campaigns targeting users. The specific timeframe is October 2026, and the impact involves the potential exposure of sensitive financial and personal data through compromised email channels.

Limitations

Evidence is limited to reported recipient details and the company's confirmation of safe hardware and funds. No specific dates of compromise, number of affected users, or full scope of data leaked are provided in the source.

Generated by Bittrees-hosted qwen35-2b sha256:aaf42c8b7c3c on 26/10/2026, 08:51:55 UTC. Based on publisher-provided feed evidence; may not cover the full original article. Check the source for details.

View archived briefing on IPFS
bafybeiauqg5kpotlqylytz52ogyhju3vp6yzwuvgm6mh326rqrso6alkkq