SafePal Data Exposure Exposes Nearly 40,000 Customers' Purchase Details

A recent data exposure incident has affected nearly 40,000 customers of SafePal, a hardware wallet provider. The issue occurred between March 2, 2025, and April 11, 2026, due to an authorization flaw in the company's order-tracking plugin.

The exposed information included names, email addresses, shipping addresses, phone numbers, and purchase details. However, seed phrases, private keys, wallet passwords, bank account information, payment card numbers, or government-issued identification were not compromised.

SafePal fixed the issue after identifying it and introduced additional security measures. The company also notified affected customers individually by email.

The incident highlights the importance of protecting customer data beyond just wallet credentials. SafePal's disclosure specifically mentioned that the leaked order information could be used in targeted phishing and impersonation attempts.