SafePal Confirms Data Breach Exposing Order Information for Nearly 40,000 Customers

Cryptocurrency wallet provider SafePal has confirmed a security incident where unauthorized parties gained access to customer order information, impacting approximately 39,798 users. The breach, which occurred between March 2, 2025, and April 11, 2026, exposed sensitive details such as customer names, email addresses, shipping addresses, and phone numbers. While wallet credentials, private keys, and cryptocurrency assets remained secure, the exposed data poses a significant phishing risk to affected individuals.

The vulnerability stemmed from an authorization flaw within a plug-in used for tracking customer orders. This flaw, under specific conditions, allowed unauthorized access to another customer's order details. SafePal stated that it has since rectified the vulnerability and implemented additional security measures to prevent recurrence. The company reiterated that it does not collect or store critical user data like seed phrases, private keys, or wallet passwords, and confirmed no evidence suggests access to SafePal wallets or theft of digital assets.

Despite the non-compromise of financial assets, the exposed personal information presents a substantial threat. Attackers could leverage the accurate purchase and shipping details to craft highly convincing phishing messages, potentially tricking users into revealing wallet credentials or clicking malicious links. These fraudulent communications might mimic official support emails, delivery notifications, or urgent requests for firmware updates.

SafePal has begun notifying affected customers via email from [email protected], with the subject line "Important Your SafePal Order Information Has Been Affected." The company strongly advises customers to independently verify any communication by visiting the official SafePal website rather than relying on links provided in suspicious messages. A dedicated support channel has been established for those impacted by the incident.

In response to the breach, SafePal has taken several proactive steps. The company is collaborating with relevant logistics and fulfillment partners to ascertain the extent of the exposure across other systems. Furthermore, SafePal has successfully identified and taken down over 30 fraudulent websites and phishing links associated with scam activities related to the breach.

To enhance data security, SafePal has reduced the data retention period for personal information within the affected order-processing environment to 90 days, adhering to legal requirements. The company is also engaging an independent third-party security firm to conduct a thorough review of its order-processing systems and validate the implemented remediation measures.

SafePal urges its customers to remain vigilant and never share their seed phrase, private key, or wallet password with anyone claiming to represent the company. They emphasize that SafePal will never request such sensitive information through email, phone, text, or social media. Users should exercise caution with unexpected messages, avoid clicking on links or scanning QR codes, and manually navigate to the official SafePal website for account or support information. Customers who may have already entered sensitive information into a suspicious website are advised to treat their wallet as compromised and immediately create a new wallet, transferring any remaining assets to it.