SafePal Says Breach Exposed Data of Nearly 40,000 Customers
Summary
SafePal says a flaw in an order-tracking plug-in exposed information for nearly 40,000 customers. The issue is fixed, and the company says wallets, seed phrases and private keys remain secure.
Key points
- SafePal said the breach affected customers who ordered between March 2, 2025, and April 11, 2026.
- Exposed information included names, email addresses, shipping addresses, phone numbers and purchase details.
- The company said a flaw in an order-tracking function for a plug-in allowed unauthorized access to other customers’ order information; it has been fixed.
- SafePal said wallets, seed phrases and private keys were not affected, and impacted customers were notified.
- The company warned affected users about phishing attempts and scams involving calls, emails, texts, refund offers and fake support messages.
- CertiK reported 52 wrench attacks worldwide through June 2026, compared with 39 during the same period in 2025.
Article Details
- Victim Organization
- SafePal
- Incident Type
- Confirmed data breach involving unauthorized access to customer order information through a flaw in an order-tracking plug-in.
- Data Types Exposed
- Names
- Email addresses
- Shipping addresses
- Phone numbers
- Purchase details
- Affected Records
- Nearly 40,000 customer records
- Operational Impact
- The flaw was remediated. SafePal said its wallets, seed phrases, and private keys remain secure. Affected customers were notified and warned about likely phishing attempts and scams.
- Ransom Or Extortion
- No ransom demand or extortion was reported. A hacker advertised information allegedly stolen from SafePal on a dark web forum; the article does not confirm the advertised information was authentic.
- Claim Status
- confirmed