Cryptocurrency wallet provider, SafePal, has disclosed a data breach that exposed order information belonging to about 39,798 customers, including
- names,
- addresses,
- contact details, and
- purchase data.
The breach was caused by an authorization flaw in SafePal’s order-tracking system that allowed users to access another customer’s order information between March 2 2025 – April 11 2026, the company said.
SafePal said the incident did not expose cryptocurrency funds, seed phrases, private keys, wallet passwords, bank account or payment card information, or government-issued identification numbers.
The company warned that the exposed information could nevertheless be used in targeted phishing and impersonation attempts, particularly because customer addresses and purchase details were involved.
