A flaw in the hardware wallet maker's order tracking plugin allowed unauthorized access to order details for more than a YEAR, with over 30 phishing sites tied to the stolen data already taken down.
SafePal says seed phrases, private keys and customer funds are NOT affected.
