SafePal Data Breach Exposes Personal Information of Nearly 40,000 Customers

SafePal has reported a security incident involving unauthorized access to customer order information, affecting approximately 39,798 users who placed orders between March 2, 2025, and April 11, 2026. The breach was due to an authorization flaw in an order-tracking plugin, allowing unauthorized access to names, email addresses, shipping addresses, phone numbers, and purchase details. Importantly, the incident did not compromise any wallet security data, such as seed phrases or private keys. SafePal has patched the vulnerability and implemented additional security measures. Affected customers have been notified via email and can verify their status on SafePal's website. The incident raises concerns about potential phishing and impersonation attempts targeting affected users. SafePal has removed over 30 fraudulent websites linked to the breach and is urging customers to remain vigilant against scams.

Key Points: • Approximately 39,798 customers' order information was exposed due to an authorization flaw. • No wallet security data, such as seed phrases or private keys, was compromised in the breach. • SafePal has implemented additional security measures and notified affected customers via email.