{"post_stream":{"posts":[{"id":4177,"name":"QnA","username":"qna","avatar_template":"/user_avatar/community.foundation.xyz/qna/{size}/284_2.png","created_at":"2026-10-26T08:00:47.572Z","cooked":"\u003cp\u003eOver the past few hours, some customers received emails that appeared to come from official Foundation domains. \u003cstrong\u003eThese emails were not sent by Foundation.\u003c/strong\u003e Please do not click any links in them or reply to them.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eYour Passport is safe.\u003c/strong\u003e \u003cstrong\u003eFunds stored on Passport are safe, and Passport devices are not compromised.\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eWhat we know so far\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eAttackers gained access to part of our backend infrastructure through a vulnerability in a self-hosted application.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eThey were likely able to access our customer support inbox, and they were able to send emails that appeared legitimate.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eWithin 10 minutes of the first reports, we shut down their ability to send emails and removed them from our systems. We have revoked all API keys, and the malicious domain used in the emails has been taken down.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eSome of these emails included customers’ mailing addresses or phone numbers. We’re aware that people who have never ordered from us have also received them, so it’s likely the attacker is combining information from several recent data leaks before sending. We believe some details may also have come from access to our customer support inbox and possibly from recent orders on our new Shopify store.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003ePlease stay vigilant\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eFoundation will never ask for your seed words, recovery phrase, PIN or passphrase.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eNever enter your seed words on any website, form or app. They belong only on your Passport and your own offline backups.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eIgnore anyone who contacts you directly claiming to be Foundation, whether by email, phone, text or social media, especially if they ask you to move funds, verify your wallet or install software.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eWe’re investigating exactly what happened and will share further updates as soon as we can. This topic will remain closed so that only staff members can post updates.\u003c/p\u003e\n\u003cp\u003eWe’re very sorry for the concern this has caused.\u003c/p\u003e","post_number":1,"post_type":1,"posts_count":3,"updated_at":"2026-10-26T08:17:30.107Z","reply_count":0,"reply_to_post_number":null,"quote_count":0,"incoming_link_count":45,"reads":24,"readers_count":23,"score":214.8,"yours":false,"topic_id":1296,"topic_slug":"important-security-notice-emails-that-appeared-to-come-from-foundation","display_username":"QnA","primary_group_name":null,"flair_name":null,"flair_url":null,"flair_bg_color":null,"flair_color":null,"flair_group_id":null,"badges_granted":[],"version":2,"can_edit":false,"can_delete":false,"can_recover":false,"can_see_hidden_post":false,"can_wiki":false,"link_counts":[{"url":"https://community.foundation.xyz/t/hacking-attempt/1290/34","internal":true,"reflection":true,"title":"Hacking Attempt","clicks":3},{"url":"https://community.foundation.xyz/t/hacking-attempt/1290/40","internal":true,"reflection":true,"title":"Hacking Attempt","clicks":0},{"url":"https://community.foundation.xyz/t/scam-email/1291/7","internal":true,"reflection":true,"title":"Scam email?","clicks":0},{"url":"https://community.foundation.xyz/t/data-leak-update-per-2026-10-29/1307","internal":true,"reflection":true,"title":"Data leak update per 2026-10-29","clicks":0},{"url":"https://community.foundation.xyz/t/hacking-attempt/1290/39","internal":true,"reflection":true,"title":"Hacking Attempt","clicks":0},{"url":"https://community.foundation.xyz/t/email-scam/1292/17","internal":true,"reflection":true,"title":"Email scam?","clicks":0}],"read":true,"user_title":"","bookmarked":false,"actions_summary":[],"moderator":true,"admin":true,"staff":true,"user_id":1,"hidden":false,"trust_level":4,"deleted_at":null,"user_deleted":false,"edit_reason":null,"can_view_edit_history":true,"wiki":false,"post_url":"/t/important-security-notice-emails-that-appeared-to-come-from-foundation/1296/1","reactions":[],"current_user_reaction":null,"reaction_users_count":0,"current_user_used_main_reaction":false,"can_accept_answer":false,"can_unaccept_answer":false,"accepted_answer":false,"topic_accepted_answer":null,"can_vote":false},{"id":4178,"name":"QnA","username":"qna","avatar_template":"/user_avatar/community.foundation.xyz/qna/{size}/284_2.png","created_at":"2026-10-26T08:02:52.830Z","cooked":"","post_number":2,"post_type":3,"posts_count":3,"updated_at":"2026-10-26T08:02:52.830Z","reply_count":0,"reply_to_post_number":null,"quote_count":0,"incoming_link_count":0,"reads":13,"readers_count":12,"score":2.6,"yours":false,"topic_id":1296,"topic_slug":"important-security-notice-emails-that-appeared-to-come-from-foundation","display_username":"QnA","primary_group_name":null,"flair_name":null,"flair_url":null,"flair_bg_color":null,"flair_color":null,"flair_group_id":null,"badges_granted":[],"version":1,"can_edit":false,"can_delete":false,"can_recover":false,"can_see_hidden_post":false,"can_wiki":false,"read":true,"user_title":"","bookmarked":false,"actions_summary":[],"moderator":true,"admin":true,"staff":true,"user_id":1,"hidden":false,"trust_level":4,"deleted_at":null,"user_deleted":false,"edit_reason":null,"can_view_edit_history":true,"wiki":false,"action_code":"pinned_globally.enabled","post_url":"/t/important-security-notice-emails-that-appeared-to-come-from-foundation/1296/2","reactions":[],"current_user_reaction":null,"reaction_users_count":0,"current_user_used_main_reaction":false,"can_accept_answer":false,"can_unaccept_answer":false,"accepted_answer":false,"topic_accepted_answer":null},{"id":4186,"name":"QnA","username":"qna","avatar_template":"/user_avatar/community.foundation.xyz/qna/{size}/284_2.png","created_at":"2026-10-26T08:19:01.186Z","cooked":"\u003cp\u003eA post was merged into an existing topic: \u003ca href=\"/t/email-scam/1292/18\"\u003eEmail scam?\u003c/a\u003e\u003c/p\u003e","post_number":3,"post_type":3,"posts_count":3,"updated_at":"2026-10-26T08:19:01.341Z","reply_count":0,"reply_to_post_number":null,"quote_count":0,"incoming_link_count":0,"reads":14,"readers_count":13,"score":2.8,"yours":false,"topic_id":1296,"topic_slug":"important-security-notice-emails-that-appeared-to-come-from-foundation","display_username":"QnA","primary_group_name":null,"flair_name":null,"flair_url":null,"flair_bg_color":null,"flair_color":null,"flair_group_id":null,"badges_granted":[],"version":1,"can_edit":false,"can_delete":false,"can_recover":false,"can_see_hidden_post":false,"can_wiki":false,"link_counts":[{"url":"https://community.foundation.xyz/t/email-scam/1292/18","internal":true,"reflection":false,"title":"Email scam?","clicks":5}],"read":true,"user_title":"","bookmarked":false,"actions_summary":[],"moderator":true,"admin":true,"staff":true,"user_id":1,"hidden":false,"trust_level":4,"deleted_at":null,"user_deleted":false,"edit_reason":null,"can_view_edit_history":true,"wiki":false,"action_code":"split_topic","post_url":"/t/important-security-notice-emails-that-appeared-to-come-from-foundation/1296/3","reactions":[],"current_user_reaction":null,"reaction_users_count":0,"current_user_used_main_reaction":false,"can_accept_answer":false,"can_unaccept_answer":false,"accepted_answer":false,"topic_accepted_answer":null},{"id":4184,"name":"QnA","username":"qna","avatar_template":"/user_avatar/community.foundation.xyz/qna/{size}/284_2.png","created_at":"2026-10-26T08:17:01.177Z","cooked":"","post_number":4,"post_type":3,"posts_count":3,"updated_at":"2026-10-26T08:17:01.177Z","reply_count":0,"reply_to_post_number":null,"quote_count":0,"incoming_link_count":1,"reads":14,"readers_count":13,"score":7.8,"yours":false,"topic_id":1296,"topic_slug":"important-security-notice-emails-that-appeared-to-come-from-foundation","display_username":"QnA","primary_group_name":null,"flair_name":null,"flair_url":null,"flair_bg_color":null,"flair_color":null,"flair_group_id":null,"badges_granted":[],"version":1,"can_edit":false,"can_delete":false,"can_recover":false,"can_see_hidden_post":false,"can_wiki":false,"read":true,"user_title":"","bookmarked":false,"actions_summary":[],"moderator":true,"admin":true,"staff":true,"user_id":1,"hidden":false,"trust_level":4,"deleted_at":null,"user_deleted":false,"edit_reason":null,"can_view_edit_history":true,"wiki":false,"action_code":"closed.enabled","post_url":"/t/important-security-notice-emails-that-appeared-to-come-from-foundation/1296/4","reactions":[],"current_user_reaction":null,"reaction_users_count":0,"current_user_used_main_reaction":false,"can_accept_answer":false,"can_unaccept_answer":false,"accepted_answer":false,"topic_accepted_answer":null},{"id":4191,"name":"QnA","username":"qna","avatar_template":"/user_avatar/community.foundation.xyz/qna/{size}/284_2.png","created_at":"2026-10-26T15:40:43.208Z","cooked":"\u003ch1\u003e\u003ca name=\"p-4191-incident-update-1\" class=\"anchor\" href=\"#p-4191-incident-update-1\" aria-label=\"Heading link\"\u003e\u003c/a\u003eINCIDENT UPDATE\u003c/h1\u003e\n\u003cp\u003eMany of you have asked how personal information ended up in the phishing emails, particularly those who ordered from us years ago. Here is what we have found so far.\u003c/p\u003e\n\u003ch2\u003e\u003ca name=\"p-4191-phishing-emails-2\" class=\"anchor\" href=\"#p-4191-phishing-emails-2\" aria-label=\"Heading link\"\u003e\u003c/a\u003ePhishing emails\u003c/h2\u003e\n\u003cp\u003eWe have identified more than 23,000 phishing email attempts across our email systems, including 19,057 messages delivered through Mailgun and 1,503 messages sent through Google Workspace. Some addresses received multiple messages, and some attempts failed or were stopped before delivery.\u003c/p\u003e\n\u003cp\u003eThese numbers do not tell us how many people had personal information exposed. We are still determining that number and will share it once we can confirm it.\u003c/p\u003e\n\u003ch2\u003e\u003ca name=\"p-4191-older-orders-and-abandoned-carts-woocommerce-3\" class=\"anchor\" href=\"#p-4191-older-orders-and-abandoned-carts-woocommerce-3\" aria-label=\"Heading link\"\u003e\u003c/a\u003eOlder orders and abandoned carts (WooCommerce)\u003c/h2\u003e\n\u003cp\u003eBefore moving to Shopify in May of this year, our store ran on WooCommerce. We had configured automatic redaction of customer details 60 days after shipping. When we viewed those orders in our store admin, the customer details were no longer visible and the orders showed as redacted.\u003c/p\u003e\n\u003cp\u003eDuring past database migrations, orders were copied into a new set of tables, but copies remained in the old tables. The redaction process updated the newer tables, which were also what our store admin displayed. Orders therefore appeared redacted even though older copies still contained personal information.\u003c/p\u003e\n\u003cp\u003eWe also found personal information in other order and refund records, as well as abandoned carts. This included shipping details entered by someone who never completed a purchase. We are still checking the historical settings and redaction process to understand why these records retained data.\u003c/p\u003e\n\u003cp\u003eThose older records were held in systems the attackers were able to reach. We relied on the redaction shown in our admin dashboard, and we now know that was insufficient to verify that the underlying data had been removed. Whatever the shortcomings in the tools we used, protecting your information was still our full responsibility.\u003c/p\u003e\n\u003cp\u003eWe plan to share our findings with WooCommerce and the relevant plugin developers. When an order is marked as redacted, its personal information should not remain in another table in the same database.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eFor other WooCommerce store owners:\u003c/strong\u003e do not rely solely on what your admin dashboard shows when personal data is redacted. Have your developer or agent check the entire database for information left behind, including legacy tables, refund records, and abandoned carts. This is especially important if you have used WooCommerce for years or have been through database migrations.\u003c/p\u003e\n\u003ch2\u003e\u003ca name=\"p-4191-recent-orders-shopify-4\" class=\"anchor\" href=\"#p-4191-recent-orders-shopify-4\" aria-label=\"Heading link\"\u003e\u003c/a\u003eRecent orders (Shopify)\u003c/h2\u003e\n\u003cp\u003eCustomer details from orders placed on our Shopify store since May may also have been exposed. We are still investigating the extent of any unauthorized access.\u003c/p\u003e\n\u003cp\u003eThese orders had not yet been manually redacted. We updated our \u003ca href=\"https://foundation.xyz/privacy\"\u003eprivacy policy\u003c/a\u003e when we moved to Shopify and were building a tool to automate redaction, but automatic deletion was not yet active.\u003c/p\u003e\n\u003ch2\u003e\u003ca name=\"p-4191-other-possible-sources-5\" class=\"anchor\" href=\"#p-4191-other-possible-sources-5\" aria-label=\"Heading link\"\u003e\u003c/a\u003eOther possible sources\u003c/h2\u003e\n\u003cp\u003eWe have received reports of phishing emails containing personal details that customers say they never shared with us. We are investigating whether the attackers combined information from our systems with data obtained elsewhere, but we have not confirmed a connection to breaches at other companies. Historical support records are also part of our investigation.\u003c/p\u003e\n\u003ch2\u003e\u003ca name=\"p-4191-what-we-have-done-6\" class=\"anchor\" href=\"#p-4191-what-we-have-done-6\" aria-label=\"Heading link\"\u003e\u003c/a\u003eWhat we have done\u003c/h2\u003e\n\u003cp\u003eWe have revoked affected email credentials, cleared queued phishing messages, and taken affected legacy services offline while preserving evidence. Our investigation into the full extent of the compromise is continuing.\u003c/p\u003e\n\u003cp\u003eWe have found no evidence that this incident compromised Passport devices or the private keys they hold. The phishing emails are designed to trick you into revealing your recovery phrase, and including your correct personal information makes them more convincing.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eNever enter your recovery phrase into a website or share it with anyone, including someone claiming to be Foundation.\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eWe will continue sharing confirmed findings and publish our full report when the investigation is complete.\u003c/p\u003e","post_number":5,"post_type":1,"posts_count":3,"updated_at":"2026-10-26T15:40:43.208Z","reply_count":1,"reply_to_post_number":null,"quote_count":0,"incoming_link_count":1,"reads":15,"readers_count":14,"score":13.0,"yours":false,"topic_id":1296,"topic_slug":"important-security-notice-emails-that-appeared-to-come-from-foundation","display_username":"QnA","primary_group_name":null,"flair_name":null,"flair_url":null,"flair_bg_color":null,"flair_color":null,"flair_group_id":null,"badges_granted":[],"version":1,"can_edit":false,"can_delete":false,"can_recover":false,"can_see_hidden_post":false,"can_wiki":false,"link_counts":[{"url":"https://foundation.xyz/privacy","internal":false,"reflection":false,"title":"Privacy Policy – Foundation","clicks":0}],"read":true,"user_title":"","bookmarked":false,"actions_summary":[],"moderator":true,"admin":true,"staff":true,"user_id":1,"hidden":false,"trust_level":4,"deleted_at":null,"user_deleted":false,"edit_reason":null,"can_view_edit_history":true,"wiki":false,"post_url":"/t/important-security-notice-emails-that-appeared-to-come-from-foundation/1296/5","reactions":[],"current_user_reaction":null,"reaction_users_count":0,"current_user_used_main_reaction":false,"can_accept_answer":false,"can_unaccept_answer":false,"accepted_answer":false,"topic_accepted_answer":null},{"id":4202,"name":"QnA","username":"qna","avatar_template":"/user_avatar/community.foundation.xyz/qna/{size}/284_2.png","created_at":"2026-10-26T18:53:09.884Z","cooked":"\u003ch1\u003e\u003ca name=\"p-4202-incident-update-2-1\" class=\"anchor\" href=\"#p-4202-incident-update-2-1\" aria-label=\"Heading link\"\u003e\u003c/a\u003eIncident Update 2\u003c/h1\u003e\n\u003cp\u003eIn our last update, we said we would share how many people had personal information exposed once we could confirm it. We can now share those numbers.\u003c/p\u003e\n\u003ch2\u003e\u003ca name=\"p-4202-the-numbers-2\" class=\"anchor\" href=\"#p-4202-the-numbers-2\" aria-label=\"Heading link\"\u003e\u003c/a\u003eThe numbers\u003c/h2\u003e\n\u003cp\u003eAcross our old WooCommerce store and our current Shopify store, records containing approximately 5,600 mailing addresses and 5,200 phone numbers, along with names and email addresses, were held in systems the attackers were able to reach. We cannot say for certain whether the attackers accessed all of these records, so we are treating all of them as potentially exposed.\u003c/p\u003e\n\u003cp\u003eThese records are a subset of our total customers.\u003c/p\u003e\n\u003ch2\u003e\u003ca name=\"p-4202-why-the-data-was-still-there-3\" class=\"anchor\" href=\"#p-4202-why-the-data-was-still-there-3\" aria-label=\"Heading link\"\u003e\u003c/a\u003eWhy the data was still there\u003c/h2\u003e\n\u003cp\u003eIn our last update, we explained that copies of orders remained in old database tables after past migrations. We have since found that the 60-day redaction also did not cover every type of order, and that some customer details were stored in other parts of the store, such as abandoned carts and contact forms, that redaction never reached.\u003c/p\u003e\n\u003ch2\u003e\u003ca name=\"p-4202-addresses-not-in-our-records-4\" class=\"anchor\" href=\"#p-4202-addresses-not-in-our-records-4\" aria-label=\"Heading link\"\u003e\u003c/a\u003eAddresses not in our records\u003c/h2\u003e\n\u003cp\u003eMore than 5,000 of the email addresses that received phishing emails do not appear in our WooCommerce or Shopify customer records. Some match our support and hiring inboxes. Together with reports of details that were never shared with us, this makes us confident the attackers also used data from outside Foundation. We are still tracing where these addresses came from.\u003c/p\u003e\n\u003ch2\u003e\u003ca name=\"p-4202-what-we-are-doing-5\" class=\"anchor\" href=\"#p-4202-what-we-are-doing-5\" aria-label=\"Heading link\"\u003e\u003c/a\u003eWhat we are doing\u003c/h2\u003e\n\u003cp\u003eOut of an abundance of caution, we are rotating all keys and secrets across our systems, including those we have no evidence were accessed.\u003c/p\u003e\n\u003cp\u003eWe are keeping a single copy of the legacy WooCommerce data offline as evidence for the investigation. Once the investigation is complete, that data will be permanently deleted.\u003c/p\u003e\n\u003cp\u003eWe have found no evidence that this incident compromised Passport devices or the private keys they hold.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eNever enter your recovery phrase into a website or share it with anyone, including someone claiming to be Foundation.\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eWe will continue sharing confirmed findings and publish our full report when the investigation is complete.\u003c/p\u003e","post_number":6,"post_type":1,"posts_count":3,"updated_at":"2026-10-26T18:53:40.716Z","reply_count":0,"reply_to_post_number":5,"quote_count":0,"incoming_link_count":10,"reads":15,"readers_count":14,"score":33.0,"yours":false,"topic_id":1296,"topic_slug":"important-security-notice-emails-that-appeared-to-come-from-foundation","display_username":"QnA","primary_group_name":null,"flair_name":null,"flair_url":null,"flair_bg_color":null,"flair_color":null,"flair_group_id":null,"badges_granted":[],"version":1,"can_edit":false,"can_delete":false,"can_recover":false,"can_see_hidden_post":false,"can_wiki":false,"link_counts":[{"url":"https://community.foundation.xyz/t/hacking-attempt/1290/36","internal":true,"reflection":true,"title":"Hacking Attempt","clicks":4}],"read":true,"user_title":"","reply_to_user":{"id":1,"username":"qna","name":"QnA","avatar_template":"/user_avatar/community.foundation.xyz/qna/{size}/284_2.png"},"bookmarked":false,"actions_summary":[],"moderator":true,"admin":true,"staff":true,"user_id":1,"hidden":false,"trust_level":4,"deleted_at":null,"user_deleted":false,"edit_reason":null,"can_view_edit_history":true,"wiki":false,"post_url":"/t/important-security-notice-emails-that-appeared-to-come-from-foundation/1296/6","reactions":[],"current_user_reaction":null,"reaction_users_count":0,"current_user_used_main_reaction":false,"can_accept_answer":false,"can_unaccept_answer":false,"accepted_answer":false,"topic_accepted_answer":null},{"id":4228,"name":"QnA","username":"qna","avatar_template":"/user_avatar/community.foundation.xyz/qna/{size}/284_2.png","created_at":"2026-10-29T12:29:20.938Z","cooked":"\u003cp\u003e2 posts were merged into an existing topic: \u003ca href=\"/t/hacking-attempt/1290/39\"\u003eHacking Attempt\u003c/a\u003e\u003c/p\u003e","post_number":7,"post_type":3,"posts_count":3,"updated_at":"2026-10-29T12:29:20.938Z","reply_count":0,"reply_to_post_number":null,"quote_count":0,"incoming_link_count":0,"reads":1,"readers_count":0,"score":0.2,"yours":false,"topic_id":1296,"topic_slug":"important-security-notice-emails-that-appeared-to-come-from-foundation","display_username":"QnA","primary_group_name":null,"flair_name":null,"flair_url":null,"flair_bg_color":null,"flair_color":null,"flair_group_id":null,"badges_granted":[],"version":1,"can_edit":false,"can_delete":false,"can_recover":false,"can_see_hidden_post":false,"can_wiki":false,"link_counts":[{"url":"https://community.foundation.xyz/t/hacking-attempt/1290/39","internal":true,"reflection":false,"title":"Hacking Attempt","clicks":5}],"read":true,"user_title":"","bookmarked":false,"actions_summary":[],"moderator":true,"admin":true,"staff":true,"user_id":1,"hidden":false,"trust_level":4,"deleted_at":null,"user_deleted":false,"edit_reason":null,"can_view_edit_history":true,"wiki":false,"action_code":"split_topic","post_url":"/t/important-security-notice-emails-that-appeared-to-come-from-foundation/1296/7","reactions":[],"current_user_reaction":null,"reaction_users_count":0,"current_user_used_main_reaction":false,"can_accept_answer":false,"can_unaccept_answer":false,"accepted_answer":false,"topic_accepted_answer":null}],"stream":[4177,4178,4186,4184,4191,4202,4228]},"timeline_lookup":[[1,5],[5,4],[7,2]],"suggested_topics":[{"fancy_title":"On Passport Prime I setup up Passphrase wallets too many times archived deleted and tried to reset","id":1079,"title":"On Passport Prime I setup up Passphrase wallets too many times archived deleted and tried to reset","slug":"on-passport-prime-i-setup-up-passphrase-wallets-too-many-times-archived-deleted-and-tried-to-reset","posts_count":9,"reply_count":3,"highest_post_number":9,"image_url":null,"created_at":"2026-05-25T04:45:23.145Z","last_posted_at":"2026-05-29T04:05:23.606Z","bumped":true,"bumped_at":"2026-05-29T04:05:23.606Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"like_count":2,"views":163,"category_id":4,"featured_link":null,"op_like_count":0,"has_accepted_answer":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user":{"id":342,"username":"sidblaq","name":"SidBlaq","avatar_template":"/user_avatar/community.foundation.xyz/sidblaq/{size}/796_2.png","trust_level":1}},{"extras":null,"description":"Recent Poster","user":{"id":6,"username":"Jack","name":"Jack Smith","avatar_template":"/user_avatar/community.foundation.xyz/jack/{size}/371_2.png","moderator":true,"trust_level":2}}]},{"fancy_title":"IMPORTANT - Passport is NOT affected by the Coldcard seed vulnerability","id":1147,"title":"IMPORTANT - Passport is NOT affected by the Coldcard seed vulnerability","slug":"important-passport-is-not-affected-by-the-coldcard-seed-vulnerability","posts_count":5,"reply_count":2,"highest_post_number":5,"image_url":null,"created_at":"2026-07-31T09:08:04.251Z","last_posted_at":"2026-08-01T10:24:34.303Z","bumped":true,"bumped_at":"2026-08-01T10:24:34.303Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"like_count":2,"views":163,"category_id":4,"featured_link":null,"op_like_count":1,"has_accepted_answer":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user":{"id":1,"username":"qna","name":"QnA","avatar_template":"/user_avatar/community.foundation.xyz/qna/{size}/284_2.png","admin":true,"moderator":true,"trust_level":4}},{"extras":null,"description":"Recent Poster","user":{"id":164,"username":"search","name":null,"avatar_template":"/letter_avatar_proxy/v4/letter/s/dfb087/{size}.png","trust_level":2}}]}],"tags":[],"tags_descriptions":{},"fancy_title":"Important security notice: emails that appeared to come from Foundation","id":1296,"title":"Important security notice: emails that appeared to come from Foundation","posts_count":3,"created_at":"2026-10-26T08:00:47.299Z","views":388,"reply_count":1,"like_count":0,"last_posted_at":"2026-10-26T18:53:09.884Z","visible":true,"closed":true,"archived":false,"has_summary":false,"archetype":"regular","slug":"important-security-notice-emails-that-appeared-to-come-from-foundation","category_id":4,"word_count":1279,"deleted_at":null,"user_id":1,"featured_link":null,"pinned_globally":true,"pinned_at":"2026-10-26T08:02:52.746Z","pinned_until":"2026-11-02T08:00:00.000Z","image_url":null,"slow_mode_seconds":0,"draft":null,"draft_key":"topic_1296","draft_sequence":null,"unpinned":null,"pinned":true,"current_post_number":1,"highest_post_number":7,"deleted_by":null,"actions_summary":[{"id":4,"count":0,"hidden":false,"can_act":false},{"id":8,"count":0,"hidden":false,"can_act":false},{"id":10,"count":0,"hidden":false,"can_act":false},{"id":7,"count":0,"hidden":false,"can_act":false}],"chunk_size":20,"bookmarked":false,"topic_timer":null,"message_bus_last_id":30,"participant_count":1,"show_read_indicator":false,"thumbnails":null,"slow_mode_enabled_until":null,"tags_disable_ads":false,"summarizable":false,"has_cached_summary":false,"valid_reactions":["heart","+1","laughing","open_mouth","clap","confetti_ball","hugs"],"has_accepted_answer":false,"can_create_shared_issue":false,"shared_issue_visible":false,"can_vote":false,"vote_count":0,"user_voted":false,"discourse_zendesk_plugin_zendesk_id":null,"discourse_zendesk_plugin_zendesk_url":"https://your-url.zendesk.com/agent/tickets/","details":{"can_edit":false,"notification_level":1,"participants":[{"id":1,"username":"qna","name":"QnA","avatar_template":"/user_avatar/community.foundation.xyz/qna/{size}/284_2.png","post_count":3,"primary_group_name":null,"flair_name":null,"flair_url":null,"flair_color":null,"flair_bg_color":null,"flair_group_id":null,"admin":true,"moderator":true,"trust_level":4}],"created_by":{"id":1,"username":"qna","name":"QnA","avatar_template":"/user_avatar/community.foundation.xyz/qna/{size}/284_2.png"},"last_poster":{"id":1,"username":"qna","name":"QnA","avatar_template":"/user_avatar/community.foundation.xyz/qna/{size}/284_2.png"},"links":[{"url":"https://community.foundation.xyz/t/email-scam/1292/18","title":"Email scam?","internal":true,"attachment":false,"reflection":false,"clicks":5,"user_id":1,"domain":"community.foundation.xyz","root_domain":"foundation.xyz"},{"url":"https://community.foundation.xyz/t/hacking-attempt/1290/39","title":"Hacking Attempt","internal":true,"attachment":false,"reflection":false,"clicks":5,"user_id":1,"domain":"community.foundation.xyz","root_domain":"foundation.xyz"},{"url":"https://community.foundation.xyz/t/hacking-attempt/1290/36","title":"Hacking Attempt","internal":true,"attachment":false,"reflection":true,"clicks":4,"user_id":1,"domain":"community.foundation.xyz","root_domain":"foundation.xyz"},{"url":"https://community.foundation.xyz/t/hacking-attempt/1290/34","title":"Hacking Attempt","internal":true,"attachment":false,"reflection":true,"clicks":3,"user_id":1,"domain":"community.foundation.xyz","root_domain":"foundation.xyz"}]},"bookmarks":[]}