SafePal has disclosed a significant data breach that has compromised the personal information of 39,798 customers who placed orders between March 2, 2025, and April 11, 2026. The breach exposed customers' names, addresses, and contact details, increasing their vulnerability to phishing and impersonation attacks.
Fortunately, the company reassured its users that no sensitive information related to cryptocurrency, such as private keys, seed phrases, or bank details, was affected. This incident comes on the heels of another breach involving Coldcard hardware wallets, which saw over $120 million in bitcoin stolen. Although these breaches raise concerns, they do not necessarily indicate systemic flaws in hardware wallets, highlighting the importance of diversifying crypto holdings.
Details of the Breach
The breach was attributed to an “authorization flaw” in a plug-in used for tracking customer orders, allowing unauthorized access to view other customers’ order information. SafePal clarified that the security of its wallets remains intact and that no critical wallet data was compromised. However, users who may have shared their private keys or seed phrases due to phishing attempts should consider their wallets compromised and take action to secure their assets.
