SafePal has reported a data breach affecting 39,798 customers, exposing personal information but not wallet credentials.
SafePal, a manufacturer of Bitcoin and cryptocurrency wallets, has reported a significant data breach affecting around 39,798 customers. A vulnerability in an order-tracking plug-in led to unauthorized access to sensitive personal information, raising concerns about user safety in the cryptocurrency space.
The compromised data includes names, email addresses, shipping addresses, phone numbers, and transaction details for customers who made purchases between March 2, 2025, and April 11, 2026. However, SafePal assured users that critical wallet credentials, such as seed phrases, private keys, and bank information, were not affected by this breach.
In a statement shared on X, SafePal confirmed that it has addressed the issue, notified affected customers via email, and set up a webpage for users to check if their data was compromised. The company, which serves around 30 million users and is backed by Binance and Animoca Brands, emphasized the importance of vigilance against potential phishing attempts following this incident.
Beware of phishing attempts! š
ā CZ š¶ BNB (@cz_binance) August 16, 2026
The breach raises alarm bells particularly due to the increasing occurrences of wrench attacks, where criminals target individuals for their cryptocurrency holdings. Chainalysis reported 46 violent incidents in the first half of 2026, resulting in losses exceeding $30 million, indicating a troubling trend for high-net-worth individuals.
SafePal's situation adds to a series of data leaks within the cryptocurrency wallet sector, following recent incidents involving Trezor and Ledger. Trezor's breach involved data from approximately 13,700 customers, while Ledger's 2020 leak compromised around 272,000 customer records, leading to numerous phishing attempts.
This breach comes amid heightened anxiety for self-custody users after a firmware vulnerability in Coldcard drained dormant Bitcoin, contributing to industry losses nearing $130 million. SafePal has publicly apologized and will continue to provide updates on the situation through its blog.
