Mail phishing attack exploits SafePal data leak affecting 40,000 customers

A mail phishing campaign exploiting a SafePal customer data breach has emerged in Italy, Wu Blockchain reported, citing local crypto outlet Criptovaluta. Attackers sent letters posing as SafePal and falsely claimed the hardware wallet had a firmware security flaw, then urged recipients to scan a QR code leading to a fake SafePal website. The letters and phishing site included real customer names, addresses, and order details. SafePal had previously confirmed that a problem with an order-tracking plugin exposed the personal data of about 40,000 customers between March 2025 and April 2026, and that the stolen information was being used in phishing attacks.