Safe Pal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 Customers
Summary: SafePal disclosed that an authorization flaw in an order-tracking plug-in exposed the names, email addresses, shipping addresses, phone numbers, and purchase details of approximately 39,798 customers, with affected customers notified by email on August 16. The exposed records did not include seed phrases, private keys, wallet passwords, or payment card numbers, and SafePal said it found no evidence the incident compromised access to wallets or funds.
Why it matters: The records tie a named individual to a home address and a hardware wallet purchase, and Chainalysis counted 46 violent incidents against crypto holders through late June with over $30 million stolen - which is why SafePal warned of fraudulent calls, letters, and fake firmware-update requests, and why anyone who entered a seed phrase in response to a suspicious message should treat that wallet as compromised.
Read the original at The Hacker News ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026