SafePal Breach Exposes 39K Users, Heightening Phishing Risks

A recent data breach affecting SafePal, a self-custody cryptocurrency wallet, has exposed the personal information of approximately 39,798 users. The incident occurred due to an authorization vulnerability in its Order Tracking Plugin, which allowed unauthorized access to customer data between March 2025 and April 2026.

The compromised customer data includes names, emails, shipping addresses, phone numbers, and purchase details. However, SafePal assured that seed phrases, private keys, wallet passwords, payment information, identification documents, and customer funds remained secure.

The breach has raised concerns about phishing risks for the affected customers, as attackers can use verifiable information to create socially engineered attacks.