Crypto wallet provider SafePal disclosed a data breach on Thursday that exposed the personal order information of approximately 39,798 customers. The breach occurred due to an authorization flaw in the company's order tracking system, which allowed unauthorized access to customer details between March 2, 2025, and April 11, 2026.
Key Details
The exposed information includes names, physical addresses, and contact details, raising concerns about potential phishing and impersonation risks for affected users. However, SafePal confirmed that no cryptocurrency funds, seed phrases, private keys, or payment information were compromised in the incident. The company emphasized that wallet passwords and seed phrases, which are crucial for accessing digital assets, remain secure.
Background
In response to the breach, SafePal has implemented additional security measures and fixed the underlying flaw. The company stated it would retain customers' personal data in its order processing system for only 90 days. Furthermore, SafePal reported that it has identified and taken down over 30 fraudulent websites and phishing links associated with the breach. This incident follows a recent hack involving Coldcard hardware wallets, which resulted in significant bitcoin losses, highlighting ongoing security challenges in the cryptocurrency space.
The breach may lead to increased scrutiny of cybersecurity practices among crypto wallet providers, potentially affecting investor confidence in digital asset management solutions. Investors will watch for further developments in SafePal's security measures and any regulatory responses to data breaches in the cryptocurrency sector.
Based on reporting by: coindesk.com, livemint.com