Binance Founder Changpeng Zhao Warns of 'Phishing' After Crypto Wallet Provider Reports Data Breach Affec

Cryptocurrency wallet provider SafePal confirmed a security breach on Sunday involving unauthorized access to data for about 40,000 customers.

What Happened

SafePal said the incident did not involve any seed phrases, private keys, bank account details, payment card numbers or government-issued identification numbers.

The security flaw was identified in the order-tracking function for a plug-in related to customer order information.

“Information including name, email address, shipping address, phone number, and purchase details was accessed externally without authorization due to the flaw,” the hardware wallet firm revealed.

SafePal warned that the exposed order details could be used for targeted phishing and impersonation attacks, and urged customers to stay vigilant.

SafePal’s Response

SafePal said it has fixed the issue and introduced additional security measures. An independent third-party security firm is being hired to validate the fix and conduct a comprehensive review of SafePal’s order-processing systems. 

The company has also reduced the retention period for personal information in its system to 90 days, subject to applicable legal requirements.

SafePal added that it has established a dedicated support channel for this incident and has identified and informed all affected customers individually via email.