Crypto
Home›Crypto›Market Structure›SafePal discloses order-tracking plugin flaw exposing…
SafePal discloses order-tracking plugin flaw exposing 39,798 customers
The incident affected orders from March 2, 2025 through April 11, 2026, but SafePal said seed phrases, private keys, passwords, and payment card numbers were not compromised.
SafePal disclosed that an authorization flaw in an order-tracking plug-in exposed personal data for 39,798 customers and that a threat actor is already advertising the stolen records on a cybercrime forum, according to The Defiant. The data set pairs home addresses and phone numbers with proof that customers own SafePal hardware wallets, making it usable for phishing and potential physical targeting, the outlet said.
SafePal reported that orders placed between March 2, 2025 and April 11, 2026 were affected, with exposure including names, email addresses, shipping addresses, phone numbers, and purchase details. The company said seed phrases, private keys, wallet passwords, bank account information, and payment card numbers were not compromised, and it found no evidence the incident enabled access to wallets or funds.
The Defiant also said a seller is promoting the file and vouching for it by sharing order IDs and shipping countries that buyers can verify against SafePal’s own lookup tool. SafePal said it emailed affected customers on Aug. 16, identified and taken down more than 30 fraudulent websites and phishing links tied to the scam activity, and is engaging an independent security firm to validate its fix.
The outlet added that SafePal customers had been reporting phishing months before the company disclosed the cause. It also noted the breach is the second hardware-wallet customer database exposed in three days, after Trezor disclosed on Aug. 13 that a ShipMonk fulfillment partner breach exposed shipping data for 13,689 customers.