Key facts
- Crypto wallet provider SafePal experienced a data breach affecting 39,798 customers.
- The incident stemmed from a flaw in an order-tracking plug-in, exposing names, emails, shipping addresses, and purchase details.
- Wallet credentials, private keys, and seed phrases were not compromised.
- The exposed data increases the risk of physical targeting and wrench attacks on customers.
- SafePal has patched the vulnerability and notified affected customers.
Crypto wallet provider SafePal has disclosed a security incident that exposed the personal information of 39,798 customers. The breach, which occurred due to an "authorization flaw" in a plug-in used for tracking customer orders, exposed names, email addresses, shipping addresses, phone numbers, and purchase details of users who placed orders between March 2, 2025, and April 11, 2026. SafePal emphasized that no cryptocurrency funds, seed phrases, private keys, bank details, or government IDs were compromised. However, the company warned that affected users face heightened risks of phishing and impersonation attempts, particularly in light of a surge in wrench attacks. Chainalysis documented 46 such violent incidents in the first half of 2026, with over $30 million stolen. SafePal joins other wallet firms like Trezor and Ledger, which have also experienced customer data leaks. SafePal has patched the vulnerability, notified affected customers, and is implementing stricter data retention policies, keeping customer data for a maximum of 90 days. The company has also removed over 30 fraudulent websites and phishing links associated with the incident and hired a third-party firm to audit its systems.