SafePal Reports Data Breach Affecting Nearly 40,000 Customers

SafePal, a provider of cryptocurrency hardware wallets, has issued a warning regarding a data breach that has affected around 39,798 customers. The breach was caused by a flaw that allowed unauthorized access to customer order information, which is now being sold by a threat actor on a cybercrime forum. SafePal confirmed that the breach impacts customers who placed orders between March 2, 2025, and April 11, 2026, exposing their names, email addresses, shipping addresses, phone numbers, and purchase details. However, the company stated that no sensitive information such as wallet seed phrases, private keys, passwords, or payment card numbers was compromised. SafePal has notified all affected customers via email and has launched an online verification tool for customers to check if their order details were stolen. The company has also warned that the stolen information could be used for targeted phishing attacks, with reports of phishing emails and calls surfacing as early as May. The threat actor selling the data has claimed to offer order ID and shipping country information as proof of the legitimacy of the sale. SafePal first received a report related to this incident in early May 2026, which was initially treated as an isolated case. Following a thorough investigation, SafePal discovered an authorization flaw in its order-tracking system that allowed unauthorized access to customer information. The company has since fixed the vulnerability and is working with a third-party security firm to ensure the integrity of its systems. SafePal has also taken steps to remove fraudulent websites and phishing links associated with the breach. Customers are advised to remain vigilant against phishing attempts and to report any suspicious communications. SafePal reassured customers that there is no need to replace their hardware wallets or move their cryptocurrency unless they have shared sensitive information in response to phishing attempts.