Back Businesstimes.Sg

Crypto wallet provider SafePal discloses data breach affecting nearly 40000 users' order information

Businesstimes.Sg • August 16, 2026

CRYPTOCURRENCY wallet provider SafePal on Sunday (Aug 16) disclosed a data breach that involved unauthorised access to 39,798 customers’ order information, including personal details such as names, addresses and purchase data.

An authorisation flaw in the order tracking system allowed access to another customer’s order information between Mar 2, 2025, and Apr 11, 2026, SafePal said in a statement.

SafePal provides a suite of secure crypto-management tools including hardware wallets, mobile and browser wallets to help people store and use digital assets, according to its website.

The breach did not involve access to “seed phrases”, private keys, wallet passwords, bank account and payment card information or government-issued identification numbers.

Wallet passwords are usually alphanumeric. The wallet provider also offers a set of randomised words, known as seed phrases, for additional security. Both of these are known only to the user. If customers lose the passwords and phrases, access to their wallets is cut off.

As a result of the breach, affected users’ order information could be used for targeted phishing and impersonation attempts, the firm said.

Get insights into businesses across South-east Asia

SafePal said it had fixed the issue and introduced further security measures in response, adding that it would retain customers’ personal data in its order processing system for only 90 days.

The crypto hardware wallet provider said it has identified and taken down more than 30 fraudulent websites and phishing links tied to the breach. REUTERS

with us your feedback on BT's products and services

Singapore may be expected to tighten measures after US ‘transshipment scam’ report: economists

Financial planners urge investors to consider other options as T-bills yields lose steam

Too little, too late? Manila’s billion-dollar bid to ignite its sputtering EV industry

Passing on values comes into focus as Asean’s family businesses hand over the reins

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SafePal Data Breach Exposes Personal Information of 39,798 Customers SafePal disclosed a significant data breach on August 16, 2026, affecting approximately 39,798 customers due to an authorization flaw in its order-tracking plugin. The breach exposed personal details such as names, email addresses, shipping addresses, and phone numbers for orders placed between March 2, 2025, and April 11, 2026. However, sensitive information like seed phrases, private keys, and wallet passwords remained secure. The flaw allowed unauthorized access to customer order information, which could be exploited for phishing attacks. SafePal has since patched the vulnerability and implemented additional security measures. Affected customers were notified via email, and SafePal has taken down over 30 fraudulent websites linked to the breach. The company has also introduced a verification tool for customers to check if their data was compromised. 28 sources 61

Extracted Entities

Crypto wallet provider SafePal discloses data breach affecting nearly 40000 users' order information

The full story

Extracted Entities

Attack Types (2)

Countries (2)

CWE Weaknesses (1)

MITRE ATT&CK (1)

Platforms (1)