SafePal Data Breach Exposes Order Information of Nearly 40,000 Customers

SafePal has disclosed a data breach affecting approximately 39,798 customers, raising concerns about targeted phishing and impersonation attacks against hardware wallet users.

According to SafePal’s disclosure, an authorization flaw in an order-tracking plugin allowed unauthorized access to customer order information. The affected records relate to orders placed between March 2, 2025, and April 11, 2026. Exposed information included customers’ names, email addresses, shipping addresses, phone numbers, and purchase details.

The company emphasized that the incident did not compromise wallet credentials or cryptocurrency holdings. SafePal said seed phrases, private keys, wallet passwords, bank information, payment-card details, and government-issued identification were not under exposure. It also reported no evidence that attackers gained access to customer wallets or funds.

SafePal Data Breach Exposes Order Information of Nearly 40,000 Customers

However, the nature of the leaked information creates a significant secondary risk. Knowing that a particular individual purchased a hardware wallet, combined with their name, phone number, or physical address, could allow criminals to construct highly convincing phishing campaigns. Attackers could potentially impersonate SafePal support and use genuine purchase information to persuade customers to reveal sensitive wallet credentials.

SafePal said it first received a report related to the issue in early May 2026. The company later escalated the matter into a formal investigation and identified the authorization flaw during a broader review of its order-processing system in July. The vulnerability has since been fixed, while SafePal said additional security measures have been implemented.

Reports have also emerged of a threat actor allegedly offering the stolen information on a cybercrime forum. The advertised dataset reportedly references a similar number of customers and the same order period, although the authenticity of the alleged sale has not been independently confirmed.

SafePal notified affected customers and urged users to remain cautious about unsolicited emails, calls, or messages requesting seed phrases, private keys, passwords, or other sensitive information.

For SafePal users, the incident highlights an important distinction: the wallets and funds were not under compromise, but leaked customer information can still become a powerful tool for social-engineering attacks.

Is SafePal Wallet the Correct Choice?

SafePal Wallet stands out as the ideal choice for anyone seeking a secure and user-friendly solution for managing their cryptocurrency assets. With its range of hardware and software products, SafePal offers versatility and convenience, catering to the needs of both beginners and experienced users alike. The wallet’s robust security features, including offline storage and encryption, ensure that users can trust that their digital assets are safe from unauthorized access. Additionally, SafePal’s commitment to continuous improvement and customer satisfaction makes it a reliable and trustworthy option in the ever-evolving landscape of cryptocurrency wallets.

So, curious to learn more? Dive into our in-depth review for more info.