SafePal Data Breach Exposes Customer Orders, Wallet Funds Remain Secure

SafePal disclosed a data breach affecting nearly 40,000 customers after an authorization flaw in its order-tracking system allowed unauthorized access to order records. The leaked data included names, email addresses, phone numbers, shipping addresses, and purchase details. Customers placed the affected orders between March 2, 2025, and April 11, 2026.

The company emphasized that seed phrases, private keys, wallet passwords, payment details, and customer funds were not compromised. SafePal warned affected users about phishing and impersonation scams involving fake refunds, firmware updates, and replacement devices. The firm has removed more than 30 fraudulent websites and phishing links linked to the scam campaign.

While the incident exposed personal information, the core security of SafePal wallets remained intact. The flaw has been fixed with additional security measures, and the company is monitoring for further malicious activity.