SafePal Data Breach Exposes Personal Information of 39,798 Customers

• •39,798 customers' personal data exposed due to an authorization flaw in SafePal's order system.
• •No sensitive wallet information, such as seed phrases or private keys, was compromised.
• •SafePal has implemented additional security measures and notified affected customers.

SafePal disclosed a significant data breach on August 16, 2026, affecting approximately 39,798 customers due to an authorization flaw in its order-tracking plugin. The breach exposed personal details such as names, email addresses, shipping addresses, and phone numbers for orders placed between March 2, 2025, and April 11, 2026. However, sensitive information like seed phrases, private keys, and wallet passwords remained secure. The flaw allowed unauthorized access to customer order information, which could be exploited for phishing attacks. SafePal has since patched the vulnerability and implemented additional security measures. Affected customers were notified via email, and SafePal has taken down over 30 fraudulent websites linked to the breach. The company has also introduced a verification tool for customers to check if their data was compromised.