Advertisement
SafePal Data Breach Exposes Personal Details of Nearly 40,000 Customers
- The incident exposed customer contact and purchase information but left wallet credentials, financial information and funds unaffected.
- SafePal has patched the vulnerability, strengthened its systems and commissioned an independent review of the fix.
- The main continuing concern is that leaked personal details could enable convincing phishing or impersonation attempts targeting customers.
Crypto wallet provider SafePal has reported a data breach affecting 39,798 customers who ordered products between 2 March 2025 and 11 April 2026. An authorisation flaw in a plug-in used to track orders apparently enabled unauthorised access to records containing customers’ names, email addresses, physical addresses, phone numbers and purchase details.
SafePal said seed phrases, private keys, wallet passwords and other wallet credentials were not compromised. It also said bank account information, payment card numbers and government-issued identification were unaffected, while there was no evidence that the incident had compromised access to wallets or funds. Despite that, the company warned that exposed details could make affected customers targets for more sophisticated phishing and impersonation schemes.
Related: Brazil to Impose 24-Hour Wait on Certain Crypto Wallet Withdrawals
Warnings of Scams After Data Breach, Customers to Verify Exposure
Potential scams could involve people posing as SafePal staff and offering firmware updates, refunds or replacement hardware in an effort to obtain wallet credentials. SafePal said it had fixed the vulnerability and introduced additional security measures, while an independent security firm was brought in to audit the fix and examine its order-processing systems.
It later began a full review and rebuild of its order-processing pipeline in July and confirmed the underlying cause. Customers can use SafePal’s verification tool to determine whether their information was affected.
Related: ASX Shareholder Seeks Court Approval to Sue Former Directors Over Failed Blockchain Overhaul
Author
Rachel Lourdesamy
Rachel is a freelance writer based in Sydney with experience within financial services, marketing, and corporate communications in the APAC region. An avid reader and a graduate of the University of Sydney, she covers topics including business, finance and human interest.
