SafePal Discloses Data Breach Affecting Nearly 40,000 Customers

SafePal Confirms Data Breach

Crypto wallet provider SafePal has revealed a significant data breach that has compromised the personal information of 39,798 customers. This security incident exposed sensitive details such as names, physical addresses, and contact information of users who placed orders between March 2, 2025 and April 11, 2026.

Nature of the Breach

The breach was due to an “authorization flaw” within a plug-in used for tracking customer orders, which inadvertently allowed unauthorized access to customer data. This vulnerability was reminiscent of a scenario where customers could access each other’s order tracking details by simply altering an order number.

What Remains Secure

Fortunately, SafePal has assured users that their crypto assets remain safe and intact. The breach did not affect crucial security elements, including private keys, seed phrases, or bank account information. However, users who have shared their private keys or seed phrases in response to phishing attempts are advised to consider their wallets compromised and transfer their assets.

Company’s Response

In light of the breach, SafePal has implemented a fix for the vulnerability and taken additional security precautions. The company began notifying affected customers via email from [email protected] on Sunday. Moreover, SafePal has enlisted an independent third-party security firm to conduct an audit of the corrective measures and the overall security of its order-processing systems.

Commitment to Data Security

SafePal plans to retain customers’ personal data in its order-processing system for only 90 days following data collection. The company has also identified and shut down over 30 fraudulent websites and phishing links associated with the incident. Customers can verify whether their information has been impacted by using a tool available on SafePal’s website.

This breach follows a recent attack on Coldcard hardware wallets, underlining ongoing security challenges in the crypto space. Although SafePal emphasizes that its core wallet security remains robust, incidents like this reinforce the necessity for users to remain vigilant and diversified in their approach to cryptocurrency storage.