SafePal Breach Exposes 39,798 Buyers as Stolen Records Hit Cybercrime Forum
The wallet maker says a flaw in an order-tracking plug-in leaked names, phone numbers and shipping addresses over 14 months. A seller is now advertising the file.
The wallet maker says a flaw in an order-tracking plug-in leaked names, phone numbers and shipping addresses over 14 months. A seller is now advertising the file.

SafePal’s customer data breach adds to growing concerns over phishing and social-engineering risks facing hardware wallet users.

A flaw in an order-tracking plug-in of bitcoin wallet provider SafePal exposed names, addresses and phone numbers of nearly 40,000 customers.

An order-tracking flaw exposed contact, shipping and purchase details, while SafePal reported no evidence of compromised wallets or funds.

SafePal is disclosing an authorization flaw in its order-tracking plug-in that exposed names, emails, addresses, phone numbers, and purchase details for about 39,798 customers. No wallet credentials or financial data were involved.

The hardware wallet manufacturer stressed that unauthorized threat actors gained access to the data through a malfunctioning plugin used to track users’ orders. The incident, which transpired between March 2, 2025 and April 11, 2026, leaves users vulnerable to phishing attacks and fraudulent phone calls. Safepal Discloses New Customer Data Incident: Almost 40K Users Involved […]

Owners of Trezor and SafePal crypto wallets at high risk of phishing attempts after data leaks, CLARITY odds at 10% despite White House meeting next week.

SafePal said it found the root cause of the breach recently, though customers had posted online about being targeted by phishing attempts as early as July.
SafePal data breach exposed home addresses of nearly 40,000 customers, days after Trezor leaked 13,689 records.

SafePal says an order-tracking flaw exposed names, contact details and purchase data for 39,798 customers, raising targeted phishing risks.

Non custodial wallet, SafePal issues urgent disclosure after customer information is accessed.


The data exposure highlights ongoing vulnerabilities in the crypto industry, emphasizing the need for enhanced privacy measures and user vigilance.