SafePal Data Breach Affects Nearly 40,000 Customers
SafePal, a manufacturer of cryptocurrency hardware wallets, has alerted nearly 40,000 customers to potential phishing attempts following a data breach. The company disclosed on August 16 that order information for 39,798 customers was compromised in the incident. Customers who placed orders between March 2, 2025, and April 11, 2026, are particularly at risk. The compromised data includes names, email addresses, shipping addresses, phone numbers, and purchase details.
SafePal emphasized that the breach did not involve sensitive information such as seed phrases, private keys, wallet passwords, bank account details, payment card numbers, or government-issued identification numbers. The company reassured customers that it does not request, collect, or store such information.
The breach was traced back to a vulnerability in the firm's order-tracking function, which allowed unauthorized access to another customer's order information. SafePal stated that it has since remediated the issue and implemented additional security measures.
Customers are warned to be on the lookout for fraudulent communications, including phone calls, emails, text messages, and letters, which may attempt to solicit their wallet credentials or personal information. SafePal has already taken down over 30 fraudulent websites and phishing links related to the incident.
Screenshots shared on social media indicate that an individual may be attempting to sell the stolen data, although these claims have not been verified. In response, SafePal has created a dedicated page for reporting scams and has established a support channel for affected customers.
