30
30
30
30
30
30
45
SafePal breach affects 39,798 customers, data allegedly for sale
SafePal disclosed a breach exposing order data of 39,798 customers via an order-tracking plug-in flaw; the data appears for sale online.
Cryptocurrency wallet maker SafePal exposed names, phone numbers, addresses and purchase details for 39,798 orders placed between March 2, 2025 and April 11, 2026, due to an authorization flaw in an order-tracking plug-in. Seed phrases, private keys, wallet passwords, payment cards and government IDs were not exposed, and no wallet or fund compromise was found. A threat actor is selling data on a cybercrime forum citing the same order window and count, and SafePal has taken down more than 30 phishing sites and notified customers on August 16.
55
30
30
45
30
30
45
30
30
45
30
30
30
30
30
30
30
30
30
30
30
30
30
45
45
30
30
30
45
30
30
30
45