- SafePal data breach exposed contact and order information belonging to 39,798 customers.
- Seed phrases, private keys, wallet passwords, payment cards, and funds were not exposed.
- SafePal removed over 30 phishing sites and plans to retain order data for only 90 days.
The SafePal data breach exposed personal and purchase information belonging to 39,798 customers after an order-tracking authorization failure. The affected records cover purchases made between March 2, 2025, and April 11, 2026. SafePal says wallet credentials and funds were not compromised. Even so, the leaked contact and shipping details create a significant risk of targeted phishing and convincing support impersonation.
SafePal Data Breach Exposes Order and Contact Details
SafePal linked the exposure to an authorization defect in an order-tracking plug-in. Users could manipulate an order number and access another customer’s information.
The SafePal data breach included names, emails, phone numbers, shipping addresses, and purchase details. Bank accounts, cards, identification numbers, seed phrases, private keys, and passwords were excluded.
SafePal received a report in early May but treated it as isolated. It rebuilt its order-processing pipeline during its July review. Investigators confirmed the flaw.
Public complaints preceded Sunday’s disclosure. Reddit and Trustpilot users reported impersonators who knew their order details. Some were sent to a fake SafePal support domain offering replacement wallets.
The SafePal data breach did not directly provide access to crypto funds. Still, the exposed information allows scammers to personalize messages, calls, and physical mail. SafePal has identified and removed more than 30 fraudulent websites and phishing links connected to the campaign.
Phishing Risk Rises Despite Secure Wallet Credentials
SafePal notified customers and launched a checker using order IDs and shipping countries. Offers of firmware, refunds, or replacements should be verified through official channels.
Anyone who entered a seed phrase or private key on a suspicious site should treat their wallet as compromised. SafePal advises creating a new wallet and moving remaining assets.
The SafePal data breach prompted security changes. The company will reduce order-data retention to 90 days and commission an assessment. A cleanup error kept older records beyond the intended period from September 2025 through April 2026.
The incident follows commerce-system exposures at Trezor and Ledger. Trezor’s shipping provider exposed data for 13,689 buyers across seven countries. Ledger reported exposure through Global-e.
None exposed private keys. They highlight risks across the commerce systems that support hardware wallet companies.
Disclaimer: This article is for informational purposes only and does not constitute financial advice. CoinCryptoNewz is not responsible for any losses incurred. Readers should do their own research before making financial decisions.
