SafePal Users Targeted by Physical Mail Phishing Following Data Breach According to Italian crypto media athlete Criptovaluta, hardware wallet maker SafePal has led physical mail attacks against Italian users. Scam letters promoting SafePal claim that the recipients' hardware wallets have a firmware security vulnerability and contain QR codes that direct users via Arweave to a fake secure website. Both the letters and the phishing website contain exact customer names, addresses and order details. Between March 2025 and April 2026, an issue with an order tracking plugin exposed the personal data of nearly 40,000 SafePal customers, including names, email addresses, and mailing addresses. SafePal previously confirmed that the attackers used the leaked data for the disconnection attempts. link