SafePal data breach hits 39,798 customers, stolen order details up for sale

Cryptocurrency hardware wallet maker SafePal has disclosed a data breach affecting roughly 39,798 customers, warning that a flaw in its order-tracking system was exploited to steal customer order information. A threat actor is now claiming to sell the stolen records on a cybercrime forum.

The breach impacts customers who placed orders between March 2, 2025, and April 11, 2026. Exposed data includes names, email addresses, shipping addresses, phone numbers, and purchase details. The company stressed that wallet seed phrases, private keys, passwords, bank account information, payment card numbers, government-issued identification numbers, and other credentials were not compromised.

"No evidence has been found that the incident itself compromised access to SafePal wallets or funds," the company said in a security advisory published Sunday.

SafePal notified all affected customers by email on August 16 with the subject line " Your SafePal Order Information Has Been Affected." The company has also launched an online verification tool that lets customers enter their order number and shipping country to check whether that order's details were stolen.

The stolen information could be used for targeted phishing and other social engineering attacks, SafePal warned, noting that customers had reported phishing emails and phone calls impersonating the company as early as May.

The seller on the cybercrime forum, spotted by DarkWebInformer, referenced the same affected order period and the same approximate number of roughly 39,798 impacted customers, indicating the data now being offered matches the breached records. SafePal advises customers to remain vigilant against unsolicited communications and to verify any requests for sensitive information through official channels.