SafePal latest crypto hardware wallet maker affected by breach, with nearly 40,000 impacted

The crypto hardware wallet company SafePal confirmed a data breach on Sunday, telling users that nearly 40,000 customers had information stolen during a recent security incident. 

The company said the incident impacted information from people who placed orders between March 2, 2025 and April 11, 2026. The stolen information includes names, email addresses, shipping addresses, phone numbers and purchase details. 

SafePal is the third hardware wallet manufacturer to be attacked over the last month after both Trezor and Coinkite dealt with security issues impacting the information for thousands of customers who own cryptocurrency. 

SafePal did not provide details on how the hackers gained access to the data, only writing in a blog post that the company recently identified a flaw “in the order-tracking function for a plug-in associated with customer order information.” 

“Under certain conditions, the flaw allowed unauthorized access to another customer's order information,” the company said, adding that the issue has since been remediated. 

The company reiterated that all SafePal wallets, seed phrases and private keys are secure. All impacted customers have been notified by email and a website has been created for people to see if they were affected.