Hardware wallet manufacturer SafePal has confirmed that scammers are mailing fake letters containing phishing QR codes to Italian customers, exploiting data leaked in an earlier breach. The fraudulent letters reference firmware security issues and direct recipients to malicious websites. SafePal disclosed the original data breach in August, which affected approximately 39,798 customers. Leaked information included names, addresses, and purchase details, but private keys and seed phrases were not compromised. As of November 12, SafePal has taken down more than 30 related fraudulent websites and previously notified affected users while implementing preventive measures such as limiting data retention to 90 days.