Despite the breach revealing the personal order information of numerous clients, all private keys, seed phrases, and crypto assets are secure.
By Omkar Godbolenow2 min readMake preferred on ShareShare this articleCopy linkX (Twitter)LinkedInFacebookEmailMake preferred on SafePal's data breach incident. (Markus Spiske/Unsplash)SummaryShow- SafePal reported a security breach that compromised the names, addresses, and contact information of 39,798 customers who placed orders between March 2, 2025, and April 11, 2026.
- The company assured that no cryptocurrency funds, seed phrases, private keys, bank details, or government IDs were affected, but cautioned that those impacted might be more susceptible to phishing and impersonation.
- SafePal has implemented measures to rectify the issue.
SafePal, a provider of crypto hardware wallets, revealed a security breach that has put the personal information of numerous customers at risk.
The compromised data includes names, physical addresses, and contact information, which could expose affected users to potential phishing and impersonation attempts. Fortunately, the breach did not affect any cryptocurrency funds or sensitive wallet information.
SafePal is known for its hardware wallets and software applications designed to help users securely store and manage their digital currencies.
This incident follows a recent breach involving Coldcard hardware wallets, where an attacker allegedly stole over $120 million in bitcoin. While these events do not necessarily indicate a fundamental flaw in hardware wallets, they highlight the fact that no crypto-storage solution is entirely immune to risk. They also underscore the need for users to diversify their crypto holdings and the wallets they use.
Details of the Incident
On Sunday, SafePal disclosed that an “authorization flaw” within a plug-in utilized for tracking customer orders enabled unauthorized access to view other customers’ orders. This flaw is akin to a parcel-tracking system at a store allowing one customer to view another’s receipt and delivery details by merely altering the order number.
The breach impacted 39,798 customers who placed orders between March 2, 2025, and April 11, 2026.
SafePal emphasized that the fundamental security of its wallets remains unaffected, clarifying that users’ seed phrases, private keys, bank passwords, and government-issued IDs were not compromised.
However, users who have mistakenly shared their private keys or seed phrases via phishing attempts should consider their wallets compromised and transfer their assets to a new wallet.
SafePal's Response
The company stated that it has rectified the vulnerability and put additional security measures in place. SafePal notified all affected customers via email from security@safepal.com on Sunday and has engaged an independent security firm to audit the fix and evaluate its order-processing systems.
Additionally, SafePal will retain customers’ personal data in its order-processing system for a maximum of 90 days from the date of collection. The company has also identified and taken down over 30 fraudulent websites and phishing links associated with the breach.
Customers can verify whether their data was compromised using a tool available on SafePal’s website, according to the company.
Latest Crypto News- 1MiCA's cleanup is creating a new scam wave across the European Union3 min ago
- 2The stablecoin yield clash that won't go away has banks, crypto battling over tradition1 hr ago
- 3The 'long bitcoin, short the bankers' era is officially over as TradFi giants embrace digital assets2 hrs ago
- 4Robot maker Unitree is going public. Hyperliquid traders see 4x upside from IPO price22 hrs ago
- 5Swiss mega-bank UBS ramps up its Bitcoin exposure with a massive 24-fold surge in ETF call options22 hrs ago
- 6Why the world’s second-largest Bitcoin mining power is shutting down rigs in its capital city22 hrs ago
- 7Paul Tudor Jones’ investment firm increases stake in BlackRock's bitcoin ETF after year of selling22 hrs ago
- 8The $11.2 billion in 2026 funding that killed crypto’s permissionless era1 day ago
- 9Clarity survives (barely), Strategy sells and the untold story of Mastercard's $1.8 billion deal: Crypto's week in 5 stories1 day ago
- 10Wall Street's private blockchain obsession is a 'race to the bottom,' Ethereum advocate Raman warns1 day ago
Building the Zcash Machine: Tachyon and Quantum Readiness
Building the Zcash Machine: Tachyon and Quantum Readiness
Zcash’s Tachyon upgrade aims to scale shielded payments, improve quantum readiness, and test whether its funding, security, and governance can hold.
By CoinDesk ResearchJun 30, 2026Commissioned byGenZcashZcash’s Tachyon upgrade aims to scale shielded payments, improve quantum readiness, and test whether its funding, security, and governance can hold.
Why it matters:
Zcash’s Tachyon upgrade aims to scale shielded payments, improve quantum readiness, and test whether its funding, security, and governance can hold.
View Full ReportMore From Tech