SafePal has reported a data breach affecting nearly 40,000 users, exposing personal information but not sensitive financial data.
SafePal, a producer of hardware cryptocurrency wallets, announced on August 16 that a data breach has affected around 39,798 users. The breach exposed names, shipping addresses, phone numbers, email addresses, and order information.
Fortunately, the compromised data did not include sensitive information such as seed phrases, private keys, passwords, banking details, or document numbers, as SafePal does not store these types of data. The company confirmed that there was no evidence of unauthorized access to users' wallets or their funds.
However, the leaked information raises concerns about potential phishing attacks, with attackers possibly impersonating support staff through calls, emails, or messages, offering refunds or requesting firmware updates. SafePal is actively monitoring for counterfeit websites and is taking steps to block them.
Incident Overview
The breach was traced back to an authorization flaw in an order tracking plugin that allowed unauthorized access to customer data. SafePal reported that the vulnerability was addressed by the time of the announcement, and they have implemented additional security measures.
The incident affected customers who placed orders between March 2, 2025, and April 11, 2026. Details about when the attackers exploited the flaw or when SafePal discovered the issue have not been disclosed.
Currently, SafePal is working with an independent security firm to investigate the breach and plans a comprehensive audit of its order processing system. In line with legal obligations, the company has shortened the data retention period for this system to 90 days and notified logistics partners to assess if their systems were compromised.
This incident follows a similar breach experienced by Trezor on August 13, when personal information of nearly 14,000 clients was leaked due to a breach at its logistics partner ShipMonk.
