Just because you bought a device from them and you received a phising email it doesn't necessarily means their customer data is leaked. These attacks are named "phishing" for a reason... it means are sent massively to everybody and if you are dumb enough to click they catch you, like a fish. I received one of these emails but I never bought anything or give my details to Foundation...