SafePal Data Breach Exposes 39,798 Customer Records

A data breach at SafePal exposed the personal details of nearly 40,000 customers. The incident occurred when an authorization flaw in a plugin used for order tracking allowed access to customer information.

According to SafePal, the affected data includes names, email addresses, delivery addresses, phone numbers, and order details. Seed phrases, private keys, wallet passwords, and payment data were not compromised.

The breach was discovered in early May 2026, but it is believed that attackers had been using the stolen information since then. SafePal has notified affected customers by email and provided a lookup tool to check if an order was affected.