Cryptocurrency wallet provider, SafePal, has disclosed a data breach that exposed order information belonging to about 39,798 customers, including
- names,
- addresses,
- contact details, and
- purchase data.
The breach was caused by an authorization flaw in SafePal’s order-tracking system that allowed users to access another customer’s order information between March 2 2025 – April 11 2026, the company said.
SafePal said the incident did not expose cryptocurrency funds, seed phrases, private keys, wallet passwords, bank account or payment card information, or government-issued identification numbers.
The company warned that the exposed information could nevertheless be used in targeted phishing and impersonation attempts, particularly because customer addresses and purchase details were involved.
SafePal said it has fixed the vulnerability and introduced additional security measures. It also said it had identified and removed more than 30 fraudulent websites and phishing links associated with the incident.
