SafePal says data breach exposed order details for 39,798 customers
SafePal has disclosed a data breach that exposed order information for 39,798 customers, according to a company post on X. The hardware wallet maker said the issue stemmed from an authorization flaw in an order-tracking plug-in and affected customers who placed orders between March 2, 2025, and April 11, 2026.
Dear community,
While your SafePal wallet, seed phrase, and private keys are secure; we identified a flaw in the order-tracking plug-in that led to unauthorized access to information of a subset of customers.
The issue has been fixed with additional security measures…
— SafePal – Crypto Wallet (@SafePal) August 16, 2026
The company said the exposed data included names, email addresses, shipping addresses, phone numbers and purchase details. It added that seed phrases, private keys and wallet credentials were not affected, and said the issue has been fixed.
SafePal also said it has emailed affected users and published a verification page for customers to check whether they were impacted. The company urged users to stay alert for phishing attempts and impersonation scams that could use the exposed contact details.
Reports around the breach noted that the flaw could let one customer view another customer’s order information under certain conditions. SafePal has not indicated that crypto assets were compromised.
While the breach does not appear to involve wallet access, the exposure of personal and purchase data can still increase the risk of targeted social engineering attacks against affected customers.
