Back Pluang

SafePal order-tracking flaw exposed personal da...

Pluang • August 16, 2026

SafePal, a crypto wallet provider, disclosed a data breach affecting nearly 40,000 customers, exposing order-related information such as purchase details and info. The breach did not compromise private keys, seed phrases, or wallet balances, ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SafePal Data Breach Exposes Personal Information of 39,798 Customers SafePal disclosed a significant data breach on August 16, 2026, affecting approximately 39,798 customers due to an authorization flaw in its order-tracking plugin. The breach exposed personal details such as names, email addresses, shipping addresses, and phone numbers for orders placed between March 2, 2025, and April 11, 2026. However, sensitive information like seed phrases, private keys, and wallet passwords remained secure. The flaw allowed unauthorized access to customer order information, which could be exploited for phishing attacks. SafePal has since patched the vulnerability and implemented additional security measures. Affected customers were notified via email, and SafePal has taken down over 30 fraudulent websites linked to the breach. The company has also introduced a verification tool for customers to check if their data was compromised. 28 sources 61

Extracted Entities

SafePal order-tracking flaw exposed personal da...

The full story

Extracted Entities

Attack Types (1)

CWE Weaknesses (1)

Platforms (1)