SafePal latest crypto hardware wallet maker affected by breach, with nearly 40,000 impacted
SafePal confirmed nearly 40,000 customers' order data was stolen, the third hardware wallet maker breached in a month after Trezor and Coinkite.
SafePal confirmed a breach exposing names, emails, shipping addresses, phone numbers, and purchase details of customers who ordered between March 2, 2025 and April 11, 2026, caused by a flaw in an order-tracking plugin. The company stressed wallets, seed phrases, and private keys remain secure, and all impacted customers were notified by email. A hacker advertised the stolen data on a dark web forum, and SafePal warned of targeted phishing via fake support calls and refund offers. CertiK data cited in the report shows 52 wrench attacks worldwide in H1 2026 with $124 million in losses, up 33% year-over-year.
- Third hardware wallet maker breached in a month, after Trezor and Coinkite
- Exposed order data enables targeted phishing and wrench-attack risk
- CertiK counted 52 wrench attacks with $124M losses in H1 2026
- No seed phrases, private keys, or wallet passwords were compromised
- Products
- SafePal hardware wallets
- Victims
- SafePal
- Organizations
- CertiKRecorded Future
From the original article
2 min read at therecord.media
The crypto hardware wallet company SafePal confirmed a data breach on Sunday, telling users that nearly 40,000 customers had information stolen during a recent security incident. The company said the incident impacted information from people who placed orders between March 2, 2025 and April 11, 2026. The stolen information includes names, email addresses, shipping addresses, phone numbers and purchase details.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.