Crypto wallet provider SafePal discloses data breach affecting nearly 40,000 users’ order information

Cryptocurrency wallet provider SafePal announced on Sunday (Aug 16) that it experienced a data breach, affecting approximately 39,798 customers' order information. The unauthorized access occurred via an authorization flaw in the order tracking system, which was active between March 2, 2025, and April 11, 2026. SafePal disclosed the incident in a statement, explaining that the breach did not involve access to seed phrases, private keys, wallet passwords, bank account or payment card information, or government-issued identification numbers.

The compromised order information includes personal details such as names, addresses, and purchase data, which could be exploited for targeted phishing and impersonation attempts. The wallet provider assured that wallet passwords, usually alphanumeric, and seed phrases, a set of random words for additional security, were not accessed. Should customers lose their passwords and phrases, they would lose access to their wallets.

SafePal asserted that it had rectified the issue and implemented additional security measures. The company also announced that it would retain customers' personal data in its order processing system for only 90 days. Furthermore, SafePal identified and took down more than 30 fraudulent websites and phishing links associated with the breach.