SafePal confirmed a data breach on August 16 that exposed order records for roughly 39,798 buyers of its cryptocurrency hardware wallets.The company traced the incident to an authorization flaw in an order-tracking plug-in. Under certain conditions, that flaw let one request retrieve another customer's order details.
SafePal Data Breach Exposes 39,798 Crypto Wallet Owners' Details
SafePal confirmed a data breach on August 16 that exposed order records for roughly 39,798 buyers of its cryptocurrency hardware wallets.The company traced the incident to an authorization flaw in an order-tracking plug-in. Under…
Safestate
Publisher
Aug 17, 2026 at 8:07 PM UTC · Updated hace 2 días · 4 min de lectura
.webp)
Key Signal
~39,798 Hardware wallet buyers exposed
Last Updated
hace 2 días
The data breach that SafePal disclosed covers orders placed between March 2, 2025 and April 11, 2026. Exposed fields include names, email addresses, shipping addresses, phone numbers, and purchase details. A threat actor has since advertised the stolen records on a cybercrime forum, though no one has independently verified that the seller holds the data.
What the Breach Did and Did Not Expose
The stolen information sits entirely on the e-commerce side of the business. Order histories and delivery details lived in the order-processing environment. None of it touches the wallet software or the devices themselves.
SafePal stated that the data breach did not expose seed phrases, private keys, wallet passwords, bank details, payment card numbers, or identification documents. The company does not collect those categories at all. Investigators found no evidence that the intrusion reached customer wallets or funds.
Article Intelligence
Topics
Sponsored
AdNewsLayer Premium
Unlock deeper intelligence.
Ad-free reading, exclusive research, and real-time onchain insights.
Go Premium
