SafePal Data Breach Exposes Nearly 40,000 Crypto Wallet Customers

A data breach at SafePal, a company that makes physical hardware wallets and software applications for cryptocurrency security, exposed the personal information of nearly 40,000 customers. The breach occurred between March 2, 2025, and April 11, 2026, and affected customers who placed orders during this period.

The breach did not compromise any cryptocurrency funds, seed phrases, private keys, bank passwords, payment card numbers, or government-issued IDs. However, it did expose names, physical addresses, and contact details, which scammers can use to craft convincing phishing emails and impersonation schemes.

SafePal traced the breach to an 'authorization flaw' in a plug-in used to track customer orders. The company patched the vulnerability, introduced additional security measures, and notified affected customers by email from [email protected] on Sunday.