The Foundation team is actively working on this. Tag me with any questions and I’ll work to answer as fast as possible. We will share a formal report when we have all details. Passport devices are safe and secure. What we know so far: some of our backend infrastructure was compromised via a vulnerability in a self hosted app. Attackers were likely able to compromise our customer support inbox. They were also able to send emails that appeared to be legitimate. Within 10 minutes of user reports, we shut down attackers’ ability to send emails and booted them off our systems. For a subset of customers with mailing addresses or phone numbers in their emails, we believe that came from (1) access to our customer support inbox, (2) cross referencing and inserting data from other recent crypto leaks and, possibly (3) recent orders on our new Shopify website. We will figure out exactly what happened and we will share more details tomorrow. I’m very sorry.