According to CoinMeta, hardware wallet manufacturer Foundation stated that attackers exploited a vulnerability in cal.com reservation software and bank-vaults to steal credentials, gain access to customer records, email systems, and domain name settings. The intrusion began on October 21st, and on October 25th, the attackers sent phishing emails to 21,463 email addresses. The leaked information included names, home addresses, phone numbers, order records, customer service communications, and some payment card details. Scammers used the stolen purchase and payment information to call customers, tricking them into providing their Bitcoin wallet seed phrases. Foundation claimed that employee accounts and devices were not compromised, and the funds stored in passport devices were safe. The company also stated that it would reduce its use of self-hosted infrastructure and switch to managed services.