Crypto Wallet SafePal Reveals Data Breach Affecting Nearly 40,000 Customers
Crypto hardware wallet provider SafePal disclosed a security breach that exposed the personal information of 39,798 customers who placed orders between March 2, 2025, and April 11, 2026. The breach compromised names, physical addresses, and contact details, but SafePal emphasized that no cryptocurrency funds, seed phrases, private keys, bank details, or government IDs were compromised.
SafePal identified an “authorization flaw” in a plug-in used to track customer orders, which likely allowed attackers to view other customers’ order details. The company has since patched the vulnerability and introduced additional security measures. SafePal also notified all affected customers by email from [email protected] and hired an independent third-party security firm to audit the fix and review its order-processing systems.
SafePal stressed that users who have shared their private keys or seed phrases via phishing emails, phone calls, or letters should treat their wallets as compromised and transfer their assets to a new wallet. The company also removed more than 30 fraudulent websites and phishing links associated with the breach.
“While the data breach exposed the personal order details of thousands of customers, all private keys, seed phrases, and crypto assets remain completely safe,” said a SafePal spokesperson.
SafePal will retain customers’ personal data in its order-processing system for only 90 days from the date of collection going forward. Customers can use a verification tool on SafePal’s website to check whether their data was affected.
