SafePal data breach exposes 40,000 users’ order details

Cryptocurrency wallet provider SafePal has disclosed a data breach affecting nearly 39,798 customers, exposing order information including names, addresses and purchase data. The breach resulted from an authorization flaw in the order tracking system that was active between March 2, 2025, and April 11, 2026, according to a company statement reported by Livemint.

SafePal said sensitive data such as seed phrases, private keys, wallet passwords, bank account and payment card information or government ID numbers were not compromised. However, the exposed order details could be used for targeted phishing and impersonation attempts. The firm said it has fixed the issue, introduced additional security measures, and taken down more than 30 fraudulent websites and phishing links linked to the breach.