SafePal Data Breach Exposes Order Info of Nearly 40,000 Users

Crypto wallet provider SafePal has disclosed a data breach that affected nearly 40,000 users' order information. The breach occurred between March 2 and April 11 last year due to an authorization flaw in the order tracking system.

The affected information includes personal details such as names, addresses, and purchase data. However, SafePal assures that no seed phrases, private keys, wallet passwords, bank account and payment card information, or government-issued identification numbers were accessed.

As a result of the breach, affected users' order information could be used for targeted phishing and impersonation attempts. SafePal has since fixed the issue and introduced further security measures, including retaining customers' personal data in its order processing system for only 90 days.

The company also claims to have identified and taken down more than 30 fraudulent websites and phishing links tied to the breach.