SafePal Confirms Italian Users Received Forged Letters Containing Phishing QR Codes

Odaily: Hardware wallet manufacturer SafePal has confirmed that some of its Italian users received forged letters containing phishing QR codes. Attackers used previously leaked customer data to send the letters, luring recipients to scan QR codes under the pretext of firmware security issues, with the QR codes directing to phishing websites. SafePal disclosed the data breach in August, affecting approximately 39,798 customers. The leaked information included names, addresses, and purchase details, while private keys and seed phrases were not affected. As of November 12, SafePal has confirmed that the letters are scams and has taken down more than 30 related fraudulent websites. The company had previously notified affected customers and implemented preventive measures such as limiting data retention to 90 days.