SafePal Reports Data Leak Affecting Nearly 40,000 Customers

Hardware wallet provider SafePal recently confirmed that an authorization flaw in its order tracking plug in led to a data breach. The incident impacted approximately 39,798 customers who placed orders between March 2, 2025, and April 11, 2026. The exposed information includes names, email addresses, phone numbers, and physical shipping addresses.

The company emphasized that the breach did not involve wallet credentials or private financial data. Because the issue was limited to order details, the core security of the hardware wallets themselves remains intact. SafePal stated it resolved the vulnerability immediately upon discovery and has brought in an outside auditor to review its systems.

To address the fallout, the company has contacted all affected customers via email and launched a dedicated page where users can check their status. SafePal is also working to take down phishing sites and has restricted its data retention period to 90 days. Users should stay alert for potential phishing attempts using the leaked contact information.