SafePal Data Breach Exposes 40,000 Crypto Customers' Order Details

Crypto wallet SafePal leaked names and addresses of nearly 40,000 users, but says all funds and private keys remain safe.

A popular crypto wallet company just admitted that thousands of its customers had personal information leaked. The good news? No money was stolen. The bad news? Affected users could now be targeted by scammers.

SafePal is a company that makes hardware wallets (small physical devices, like a USB stick, used to store cryptocurrency safely offline) along with apps to manage digital money. On Sunday, it revealed that a security flaw exposed customer order information.

Here's exactly what was leaked:

Names, physical addresses, and contact details
Of 39,798 customers who placed orders between March 2, 2025 and April 11, 2026

What was NOT leaked (the important part):

Cryptocurrency funds
Seed phrases (a secret list of words that acts as the master key to your crypto wallet)
Private keys (secret codes that prove you own your crypto)
Bank details, payment card numbers, or government IDs

The problem came from an "authorization flaw" — a bug in the system that tracks orders. Think of it like a parcel-tracking website that lets one shopper see another shopper's delivery details just by changing the order number.

Why does this matter if no money was stolen? Because scammers can use leaked names and addresses for phishing (fake emails, calls, or messages that trick you into handing over passwords or secret keys). SafePal warned that anyone who has already shared their seed phrase or private key with a stranger should immediately move their crypto to a brand-new wallet.

What SafePal is doing about it:

Fixed the bug and added new security measures
Emailed all affected customers (from security@safepal.com)
Hired an outside security firm to double-check the fix
Removed over 30 fake websites and scam links
Promised to keep customer data for only 90 days going forward

This breach comes shortly after hackers stole at least $120 million in bitcoin from Coldcard hardware wallets. The takeaway for beginners: no crypto storage method is 100% risk-free, so spreading your holdings across different wallets can reduce your risk.

This is an AI-generated summary. Read the original article at: https://www.coindesk.com/tech/2026/08/16/crypto-wallet-safepal-reveals-a-data-breach-exposing-nearly-40-000-customers-order-info