Back Kucoin

SafePal Addresses Security Vulnerability Impacting 39,800 Users

Kucoin • August 16, 2026

According to ME News, on August 16 (UTC+8), SafePal officially announced a security vulnerability in its order tracking plugin, which led to unauthorized access to order information of certain customers. Approximately 39,800 affected customers placed orders between March 2, 2025, and April 11, 2026. The leaked data includes names, email addresses, shipping addresses, phone numbers, and purchase details. Users’ wallets, seed phrases, and private keys were not compromised; the incident did not involve seed phrases, private keys, wallet passwords, bank account information, payment card numbers, or government-issued identification documents. The issue has been resolved, SafePal has implemented additional security measures, and all affected customers have been notified individually via email. Users can check whether they are affected by visiting the official verification page and entering their order number and shipping country. (Source: ODAILY)

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SafePal Data Breach Exposes Personal Information of 39,798 Customers SafePal disclosed a significant data breach on August 16, 2026, affecting approximately 39,798 customers due to an authorization flaw in its order-tracking plugin. The breach exposed personal details such as names, email addresses, shipping addresses, and phone numbers for orders placed between March 2, 2025, and April 11, 2026. However, sensitive information like seed phrases, private keys, and wallet passwords remained secure. The flaw allowed unauthorized access to customer order information, which could be exploited for phishing attacks. SafePal has since patched the vulnerability and implemented additional security measures. Affected customers were notified via email, and SafePal has taken down over 30 fraudulent websites linked to the breach. The company has also introduced a verification tool for customers to check if their data was compromised. 28 sources 61

Extracted Entities

SafePal Addresses Security Vulnerability Impacting 39,800 Users

The full story

Extracted Entities

Attack Types (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)

Platforms (1)