SafePal Data Breach Exposes Order Details of 40,000 Customers

A data breach at SafePal, a wallet provider, exposed order information for nearly 40,000 customers. The compromised records included names, shipping addresses, purchase history, and contact details.

SafePal confirmed that the breach occurred on its commerce systems, which handle purchases and customer data, but clarified that private keys, seed phrases, and crypto assets were not affected.

The distinction is important because a logistics partner breach can be just as dangerous as a compromise of the wallet maker's internal database. An attacker does not need a seed phrase if they can convince a customer to enter it into a convincing lookalike interface built from leaked order context.