SafePal Bitcoin Wallet Data Breach Stokes Fears of Physical Attacks

In brief

• SafePal disclosed that an order-tracking plug-in flaw gave attackers access to personal data—names, emails, shipping addresses, phone numbers and purchase details—for roughly 39,798 customers.
• The exposed mix of addresses and proof of crypto ownership raises the risk of physical targeting as wrench attacks surge, with Chainalysis documenting 46 violent incidents and over $30 million stolen in the first half of 2026, on pace for a record year.
• SafePal joins a string of wallet firms hit by leaks—Trezor's recent ShipMonk breach exposed ~13,700 customers, and Ledger's 2020 leak of ~272,000 led to ransom threats.

Bitcoin and crypto wallet maker SafePal said Saturday that a flaw in an order-tracking plug-in gave attackers unauthorized access to the personal information of roughly 39,798 customers, the latest breach to put a hardware wallet company's users at risk of being physically targeted.

In a statement posted to X, SafePal said the exposed data spans customers who placed orders between March 2, 2025, and April 11, 2026, and includes names, email addresses, shipping addresses, phone numbers, and purchase details.

The company stressed that wallet credentials themselves were untouched, saying seed phrases, private keys, wallet passwords, bank details, payment card numbers and government IDs were not involved. SafePal, a non-custodial wallet suite backed by Binance and Animoca Brands that says it serves 30 million users, said it has fixed the issue, notified affected customers by email, and set up a page to check exposure.