SafePal Discloses Data Breach Affecting Nearly 40,000 Users

SafePal, a manufacturer of hardware crypto wallets, has disclosed a data breach affecting approximately 39,798 users. The incident occurred when an authorization error in an order tracking plugin allowed unauthorized parties to view other customers' orders.

The exposed information includes names, delivery addresses, phone numbers, emails, and order details, but the company assures that seed phrases, private keys, passwords, bank details, card numbers, or documents were not compromised. Developers have found no evidence of unauthorized access to user wallets or funds.

SafePal is currently monitoring fake resources and working to have them blocked. The company has reduced the data retention period in its order processing system to 90 days and notified logistics partners to check if their systems were affected.