● Covered by 4 sources · 4 reportsMedium impact4 negative
SafePal data breach exposes order information for 39,798 customers
Key points
- SafePal reported a data breach impacting 39,798 customers.
- Exposed data includes names, emails, shipping addresses, phone numbers, and purchase info.
- Wallet seed phrases, private keys, and financial data were not exposed.
- A threat actor is selling the stolen data on a cybercrime forum.
- The breach occurred due to a vulnerability in an order-tracking function.
- The breach affected orders placed between March 2, 2025, and April 11, 2026.
- SafePal disclosed the data breach on Sunday.
- SafePal is the third hardware wallet manufacturer attacked in the last month.
- Trezor and Coinkite also dealt with security issues recently.
- SafePal notified affected customers individually by email on August 16.
- The notification email subject line was "[Important] Your SafePal Order Information Has Been Affected."
- SafePal found no evidence the incident compromised access to SafePal wallets or funds.
SafePal Discloses Customer Data Breach
SafePal, a provider of cryptocurrency hardware wallets, has announced a data breach affecting nearly 40,000 customers. The breach exposed personal order information for customers who made purchases between March 2, 2025, and April 11, 2026. The company stated that the incident did not compromise sensitive wallet credentials like seed phrases or private keys.
Exposed Information and Potential Risks
The stolen data includes customer names, email addresses, shipping addresses, phone numbers, and purchase details. SafePal has warned that this information could be used by malicious actors for targeted phishing and social engineering attacks. Reports of phishing emails and phone calls related to SafePal have already surfaced as early as May.
Stolen Data Offered on Cybercrime Forum
A threat actor is reportedly selling the compromised SafePal customer data on a cybercrime forum. The seller's claims align with the details provided by SafePal regarding the number of affected customers and the order period. The actor is offering to share specific order IDs and shipping countries as proof of the data's legitimacy.
Company Response and Customer Actions
SafePal notified all impacted customers via email on August 16 and has launched an online verification tool. This tool allows customers to check if their order details were part of the breach by entering their order number and shipping country. The company first received a report consistent with the incident in early May 2026.
Updates
- SafePal notified affected customers individually by email on August 16.
- The notification email subject line was "[Important] Your SafePal Order Information Has Been Affected."
- SafePal found no evidence the incident compromised access to SafePal wallets or funds.
- SafePal is the third hardware wallet manufacturer attacked in the last month.
- Trezor and Coinkite also dealt with security issues recently.
- The breach occurred due to a vulnerability in an order-tracking function.
- The breach affected orders placed between March 2, 2025, and April 11, 2026.
- SafePal disclosed the data breach on Sunday.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Primary sources
arXiv 2308.00375How outlets covered it
SafePal, a hardware wallet manufacturer, disclosed an authorization flaw in an order-tracking plug-in that exposed personal and purchase details for approximately 39,798 customers. The exposed data did not include wallet credentials or financial information, but SafePal warned customers about potential fraud attempts.
SafePal, a cryptocurrency hardware wallet manufacturer, confirmed a data breach affecting nearly 40,000 customers who placed orders between March 2, 2025, and April 11, 2026. Stolen information includes names, email addresses, shipping addresses, phone numbers, and purchase details, raising concerns about potential phishing attacks and "wrench attacks" against crypto holders.
Crypto hardware wallet SafePal is informing approximately 40,000 customers that their personal information, including names, addresses, and email addresses, was stolen in a data breach. The breach occurred due to a vulnerability in an order-tracking function, and while sensitive wallet credentials were not compromised, affected individuals are advised to be cautious of phishing attempts.
Cryptocurrency hardware wallet provider SafePal reported a data breach affecting approximately 39,798 customers, exposing names, email addresses, shipping addresses, phone numbers, and purchase information. A threat actor is now claiming to sell this stolen data on a cybercrime forum. This breach could lead to targeted phishing and social engineering attacks against affected customers.