SafePal Discloses Authorization Flaw Exposing Order Details of Nearly 40,000 Customers

A crypto hardware wallet provider is disclosing an authorization flaw in its order-tracking plug-in that exposed sensitive customer order details.

SafePal says the flaw allowed unauthorized external access to names, email addresses, shipping addresses, phone numbers, and purchase details for approximately 39,798 customers who placed orders from March 2nd, 2025, to April 11th, 2026.

Information including name, email address, shipping address, phone number, and purchase details, was accessed externally without authorization due to the flaw.”

The company says no wallet credentials or financial data were involved or stored.

SafePal says it fixed the flaw upon discovery, implemented additional security measures, engaged a third-party auditor, and tightened data retention to 90 days.

All affected customers received individual email notifications from security@safepal.com on August 16th.

The company has also taken down more than 30 fraudulent websites and phishing links while opening a dedicated support channel.

… Continue reading the full article at the original source below.