SafePal Data Breach Exposes Order Info of 39,798 Customers
Crypto wallet provider SafePal has disclosed a data breach that exposed order information belonging to about 39,798 customers. The breach was caused by an authorization flaw in SafePal's order-tracking system between March 2 and April 11. This allowed users to access another customer's order information.
The compromised information included names, addresses, contact details, and purchase data. However, the company claims that cryptocurrency funds, seed phrases, private keys, wallet passwords, bank account or payment card information, or government-issued identification numbers were not exposed.
SafePal warned that the exposed information could be used in targeted phishing and impersonation attempts due to customer addresses and purchase details being involved. The company has fixed the vulnerability and introduced additional security measures, including removing over 30 fraudulent websites and phishing links associated with the incident.