SafePal Data Breach Exposes 40,000 Users and Sparks Fresh Fears of Physical Attacks

TL;DR

• SafePal revealed that a flaw in an order tracking plugin exposed personal data of approximately 39,798 customers.
• The leaked information includes names, emails, shipping addresses and phone numbers; no private keys or seed phrases were compromised.
• Chainalysis documented 46 physical attacks linked to cryptocurrencies in the first half of 2026, with over $30 million stolen, putting the year on track for an annual record.

SafePal confirmed that a vulnerability in an order tracking plugin allowed unauthorized access to personal information of approximately 39,798 customers. This latest security breach exposes hardware wallet users to the risk of being physically located and attacked. The company published a statement on X detailing that the compromised data corresponds to orders placed between March 2, 2025 and April 11, 2026.

The exposed information includes names, email addresses, shipping addresses, phone numbers and purchase details. The company, however, stressed that wallet credentials remain intact: seed phrases, private keys, passwords, banking data, card numbers and identity documents were not affected.

… Continue reading the full article at the original source below.