SafePal Data Leak: Information of 39.8K Customers Offered for Sale

SafePal, a manufacturer of hardware cryptocurrency wallets, has confirmed a data breach affecting nearly 40,000 customers. The incident stemmed from the exploitation of a vulnerability in the order tracking system, allowing attackers to access personal information of users who made purchases between March 2025 and April 2026.

Exposed data includes names, email addresses, mailing addresses, phone numbers, and order details. However, the company emphasized that critical data—such as seed phrases, private keys, passwords, banking details, and identification numbers—remained secure. SafePal also assured that the breach did not compromise the security of customer wallets or funds.

SafePal has already notified affected users via email and launched an online tool to check if a specific order was impacted. The company warns of potential phishing attacks, including fake emails and calls offering firmware updates or product returns. As part of its investigation, SafePal identified and fixed a vulnerability in the order tracking plugin and discovered a configuration error that caused order data to be stored longer than intended.

An unknown attacker is currently offering the stolen data for sale on a darknet forum. The seller confirmed the breach period and the number of affected customers, aligning with SafePal’s official statement. The company has already blocked over 30 phishing websites and links associated with the incident.

Customers whose data was compromised are advised to exercise caution when receiving suspicious messages. If a user has already shared their seed phrase or private key in response to a phishing attack, they should consider their wallet compromised and transfer funds to a new SafePal device.