Foundation Revokes Leaked Cloudflare Keys and Investigates Phishing Incident
Start here
AI-assisted source synthesis · not an independent investigation.
Foundation had previously revoked the relevant keys after Cloudflare API keys were leaked. On October 26, 2026, the company said that at least one leaked key had been used to send phishing emails from its domain, and that it had revoked all API keys. Foundation said Passport devices and the Bitcoin, funds, and hardware in them were not affected. It is currently investigating and will publish a report. Recipients said the phishing emails included their names, addresses, email addresses, and purchase information; as of the report’s publication, Foundation had not said whether customer order information had been accessed.
AI-written from reports · updated 2 hours ago
Timeline
Follow the reporting to see the different sides of the story.
- CryptopolitanFoundation says leaked Cloudflare API keys were used to send phishing emails from its domain
Foundation said at least one leaked Cloudflare API key was used to send phishing emails from its domain, and that it has revoked all API keys. The company said Passport devices and the Bitcoin, funds, and hardware in them were not affected, and that it is investigating the incident and will publish a report. Recipients said the emails contained names, addresses, email addresses, and purchase information, but Foundation has not said whether customer order information was accessed.
Heat over time
Not enough consecutive observations yet to draw a trend.