SafePal breach affects 39,798 customers, data allegedly for sale
SafePal disclosed a breach exposing order data of 39,798 customers via an order-tracking plug-in flaw; the data appears for sale online.
Cryptocurrency wallet maker SafePal exposed names, phone numbers, addresses and purchase details for 39,798 orders placed between March 2, 2025 and April 11, 2026, due to an authorization flaw in an order-tracking plug-in. Seed phrases, private keys, wallet passwords, payment cards and government IDs were not exposed, and no wallet or fund compromise was found. A threat actor is selling data on a cybercrime forum citing the same order window and count, and SafePal has taken down more than 30 phishing sites and notified customers on August 16.
- Authorization flaw in order-tracking plug-in let one customer view another's order information
- Affected orders span March 2, 2025 to April 11, 2026; no keys, cards or IDs exposed
- A threat actor is selling 39,798 records on a forum; authenticity unconfirmed
- Impersonators posing as SafePal used email, letters and calls; 30+ phishing sites taken down
- Company fixed the flaw, hired outside security firm and cut order-data retention to 90 days
- Vendors
- SafePal
- Organizations
- DarkWebInformer
From the original article
2 min read at helpnetsecurity.com
Cryptocurrency wallet maker SafePal disclosed a data breach that exposed order information for 39,798 customers, including names, email addresses, shipping addresses, phone numbers and purchase details. The company traced the exposure to an authorization flaw in a plug-in used for order tracking. Under certain conditions, the flaw let one customer view another customer’s order information.
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.