SafePal Data Breach Victims Are Now Getting Scam Letters at Home - Yahoo
Scammers are mailing fake SafePal letters to Italian customers' homes, exploiting personal information leaked during a data breach that exposed nearly 40,000 buyers of the company's crypto hardware wallets.
The scam letters claim recipients' wallets have a firmware flaw and direct them to a fake SafePal site via QR code. Both the letters and fraudulent websites display customers' real names, addresses and order details, making the deception more convincing.
Anyone who enters their wallet's recovery phrase into the fake site risks losing all their cryptocurrency, as these phrases provide complete access to the wallet's contents.
SafePal Response
SafePal confirmed the scam on X on Thursday, explicitly linking it to their August data incident. The company emphasized that their wallet infrastructure remains secure and that they would never send physical letters or request seed phrases.
These letters are NOT from SafePal, and wallet infrastructure remains secure. SafePal will never send physical letters or ask for seed phrases.
Previous Breaches
SafePal disclosed on August 16 that a flaw in an order-tracking plug-in exposed personal information of 39,798 customers between March 2025 and April 2026. While recovery phrases and private keys were not compromised, the leaked addresses have proven valuable to scammers.
Similar scams followed Ledger's 2020 breach, which exposed postal addresses of about 272,000 users. Trezor also experienced a data leak in August when its shipping partner compromised 13,689 customer records.
Related
