Every recorded Foundation security incident, newest first, with severity, fix status and sources.
Thousands of Passport customers and other contacts received convincing phishing from Foundation's own domains, and about 5,600 addresses and 5,200 phone numbers are treated as exposed. Foundation states devices and funds on Passport were not compromised.
More entries do not mean a less secure brand: widely sold devices draw more published research and more targeted attacks, and some vendors disclose more than others.
WalletInsights. Hardware wallet security incident tracker. Last checked November 3, 2026. https://walletinsights.io/en/security-incidents/foundation/
Vendors, researchers and readers can send corrections or statements to security@walletinsights.io. We check them against the sources, update the entry and record the change in its log.