Crypto wallet provider breach exposes 39,798 customers

TLDR

Crypto wallet provider SafePal has confirmed a data breach exposing order-related personal data for 39,798 customers, while stating wallets, private keys, and funds remain secure.

1. SafePal says an authorization flaw in its order-tracking plugin exposed names, emails, phone numbers, and shipping addresses for orders between March 2025 and April 2026.
2. The main risk is targeted phishing and impersonation, not direct theft of crypto, because seed phrases, private keys, and payment details were not part of the leaked data.
3. The incident highlights that wallet hardware can stay secure even while surrounding ecommerce systems fail, reinforcing the need to separate storage, vendors, and identity exposure.

Deep Dive

1. Scope Of The Breach

SafePal disclosed that about 39,798 customers had their order information exposed due to an authorization flaw in an order-tracking plugin covering purchases from 2 March 2025 to 11 April 2026. CoinDesk reports that leaked data includes names, physical addresses, and contact details tied to hardware wallet and accessory orders.

Critically, SafePal states that seed phrases, private keys, wallet passwords, bank account data, card numbers, and government IDs were not accessed, and there is no evidence that wallets or funds were directly compromised. SafePal has patched the flaw, implemented extra access controls, and hired a third party to review its order-processing systems.

2. Risks For Affected Users

While the breach does not let attackers open your wallet by itself, it gives them enough personal data to craft convincing phishing and impersonation attempts. SafePal warns that attackers may pose as support staff offering refunds, firmware updates, or replacement devices to trick users into revealing seed phrases or private keys.

Reports note that SafePal has already taken down more than 30 phishing sites linked to the incident and will now retain order-related personal data for only 90 days to reduce future exposure risk. Reuters highlights that affected users should expect more targeted scams using their real name and address.

3. Lessons For Wallet Security

This incident shows a common pattern in crypto security: hardware wallet architecture can remain isolated and secure even when surrounding ecommerce or support systems leak customer data. Crypto.news notes that SafePal has reduced data retention and kept an encrypted offline copy only for investigations.

For users, the main structural lesson is to separate where you store assets from where your identity and shipping data live, and to diversify both wallet brands and vendors. It also underscores that social engineering is now as important a threat vector as technical exploits.

Confidence: high because multiple independent reports and SafePals own incident notice are consistent on scope and limits of the breach.

Conclusion

SafePals breach is serious for privacy but, based on current information, does not directly expose customer funds or core wallet secrets. The real danger is more sophisticated phishing that exploits leaked personal details. For crypto users, the safest response is heightened vigilance around support communications, strict protection of seed phrases, and a broader mindset that defends against social engineering even when wallet hardware itself remains uncompromised.