SafePal Data Breach Impacts 39,798 Customers, Stolen Info for Sale
The company said the flaw could expose names, emails and purchase details, and it has taken down more than 30 linked phishing sites.
- On Sunday, SafePal, a cryptocurrency wallet provider, disclosed a data breach involving unauthorized access to about 39,798 customers' order information, including names, addresses, and purchase data.
- An authorization flaw in an order-tracking plugin allowed unauthorized access to customer records between March 2, 2025, and April 11, 2026, under certain conditions that exposed another customer's order information.
- SafePal stressed the breach did not compromise "seed phrases," private keys, or wallet passwords; however, exposed purchase details could enable attackers to craft more convincing phishing attempts.
- The company fixed the plugin vulnerability and introduced further security measures, reducing personal-data retention in its order-processing environment to 90 days, subject to legal requirements.
- SafePal identified and taken down more than 30 fraudulent websites and phishing links tied to the activity, while engaging an independent third-party security firm to validate its system fixes.
56 Articles
56 Articles
SafePal breach leaks the addresses but not the crypto, which may be the bigger problem
SafePal, the Binance-backed maker of hardware and software crypto wallets, has disclosed a data breach affecting roughly 39,798 customers, all of whom placed orders between 2 March 2025 and 11 April 2026. The exposed records cover order information, namely names, physical addresses and contact details. It is the kind of leak that feels almost quaint […] This story continues at The Next Web
SafePal Discloses Authorization Flaw Exposing Order Details of Nearly 40,000 Customers
SafePal is disclosing an authorization flaw in its order-tracking plug-in that exposed names, emails, addresses, phone numbers, and purchase details for about 39,798 customers. No wallet credentials or financial data were involved. The post SafePal Discloses Authorization Flaw Exposing Order Details of Nearly 40,000 Customers appeared first on The Daily Hodl.
BleepingComputer
SafePal data breach impacts 39,798 customers, stolen info for sale
Cryptocurrency hardware wallet provider SafePal is warning of a data breach affecting about 39,798 customers after a flaw was exploited to steal customer order information, and a threat actor is now claiming to be selling the stolen data. [...]
Crypto wallet provider SafePal discloses data breach affecting nearly 40,000 users' order information
An authorization flaw in the order tracking system allowed access to another customer's order information between March 2, 2025, and April 11, 2026, SafePal said in a statement.
Coverage Details
Bias Distribution
- 78% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
