Back startupfortune.com

“ That's more than three months between the first warning sign and the moment customers found out ” S Startup Fortune (Other)

startupfortune.com • August 17, 2026

SafePal disclosed a data breach exposing the names, addresses, phone numbers and order details of nearly 40,000 customers, and admitted it first learned of the problem in May, three months before going public. The incident follows similar breaches at Trezor and Coldcard, pointing to a rough year for hardware wallet security.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SafePal Data Breach Exposes Personal Information of 39,798 Customers SafePal disclosed a significant data breach on August 16, 2026, affecting approximately 39,798 customers due to an authorization flaw in its order-tracking plugin. The breach exposed personal details such as names, email addresses, shipping addresses, and phone numbers for orders placed between March 2, 2025, and April 11, 2026. However, sensitive information like seed phrases, private keys, and wallet passwords remained secure. The flaw allowed unauthorized access to customer order information, which could be exploited for phishing attacks. SafePal has since patched the vulnerability and implemented additional security measures. Affected customers were notified via email, and SafePal has taken down over 30 fraudulent websites linked to the breach. The company has also introduced a verification tool for customers to check if their data was compromised. 40 sources 61

Extracted Entities

“ That's more than three months between the first warning sign and the moment customers found out ” S Startup Fortune (Other)

The full story

Extracted Entities

Attack Types (1)

Companies (2)

CWE Weaknesses (1)

Platforms (1)