449/69 Wednesday, August 19, 2026
SafePal, a cryptocurrency security company, disclosed a data breach affecting approximately 39,798 customers after attackers exploited an authorization vulnerability in the order-tracking function of a plugin related to customer order data. The vulnerability allowed unauthorized individuals to access other customers’ order information. The incident affected customers who placed orders between March 2, 2025, and April 11, 2026. The accessed data included names, email addresses, shipping addresses, phone numbers, and order details.
SafePal develops hardware wallets, software wallets, mobile applications, and browser-based tools for storing and managing digital assets across multiple blockchains and cryptocurrencies. The company disclosed the incident after discovering that a threat actor had begun advertising the stolen data for sale on a cybercrime forum, claiming a number of affected customers that matched the company’s records. SafePal stated that it notified affected customers individually by email on August 16 and warned that the leaked order information could be used to create more convincing phishing campaigns, such as impersonating customer support, offering fake refunds, issuing fake firmware update notices, or sending links to malicious websites to steal additional information.
The company emphasized that the incident did not expose seed phrases, private keys, wallet passwords, or credentials used to access wallets. It also did not affect bank account information, payment card numbers, or government IDs, as the company does not store such data. SafePal said it has found no evidence that attackers accessed customers’ wallets or funds. However, if users have entered or disclosed their seed phrase or private key through suspicious messages, websites, phone calls, or letters, they should consider the wallet compromised and create a new wallet using an official SafePal device or application before immediately transferring any remaining assets. SafePal stated that it has fixed the vulnerability, strengthened security measures, reduced data retention to 90 days, engaged an external security company to review its systems and remediation, removed more than 30 phishing websites and links, opened a dedicated support channel for the incident, and continues to monitor related risks.
Source: https://securityaffairs.com/197391/data-breach/safepal-says-39798-customers-hit-by-data-breach.html