SafePal Data Breach Exposes Personal Data of Nearly 40,000 Crypto Wallet Customers

TLDR

• An authorization flaw in SafePal’s order-tracking plugin exposed data on nearly 39,798 customers
• Exposed info includes names, emails, phone numbers, shipping addresses, and purchase details
• Private keys, seed phrases, and wallet funds were not affected
• SafePal took down over 30 phishing websites linked to the breach
• The company is now reducing personal data retention to 90 days and hiring an independent security firm

Crypto wallet provider SafePal disclosed on August 16 that a flaw in its order-tracking plugin exposed personal data belonging to approximately 39,798 customers.

Dear community,

While your SafePal wallet, seed phrase, and private keys are secure; we identified a flaw in the order-tracking plug-in that led to unauthorized access to information of a subset of customers.

The issue has been fixed with additional security measures…

- SafePal – Crypto Wallet (@SafePal) August 16, 2026

The breach was caused by an authorization defect in a plugin used to track orders. Under certain conditions, the flaw allowed unauthorized access to another customer’s order information.

… Continue reading the full article at the original source below.