--- title: SafePal data breach impacts 39,798 customers, stolen... description: Cryptocurrency hardware wallet maker SafePal disclosed a data breach affecting roughly 39,798 customers who placed orders between March 2, 2025, and April 11,... canonical: https://daily.dev/posts/safepal-data-breach-impacts-39-798-customers-stolen-info-for-sale-dzgepjwhn twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: SafePal data breach impacts 39,798 customers, stolen info for sale | daily.dev og:description: Cryptocurrency hardware wallet maker SafePal disclosed a data breach affecting roughly 39,798 customers who placed orders between March 2, 2025, and April 11,... og:url: https://daily.dev/posts/safepal-data-breach-impacts-39-798-customers-stolen-info-for-sale-dzgepjwhn og:image: https://api.daily.dev/og/posts/dZgepJwHn.png og:image:alt: SafePal data breach impacts 39,798 customers, stolen info for sale og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # SafePal data breach impacts 39,798 customers, stolen info for sale **[BleepingComputer](https://daily.dev/sources/bleepingcomputer)** · 4 min read · 0 upvotes · 0 comments ## Summary Cryptocurrency hardware wallet maker SafePal disclosed a data breach affecting roughly 39,798 customers who placed orders between March 2, 2025, and April 11, 2026. An authorization flaw in a plug-in used by its order-tracking function allowed a threat actor to steal names, emails, shipping addresses, phone numbers, and purchase information, though wallet seed phrases, private keys, and payment data were not exposed. A threat actor is now advertising the stolen data on a cybercrime forum. SafePal has patched the flaw, launched a verification tool for customers to check exposure, and warns of ongoing phishing campaigns referencing fake firmware updates. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What customer data was exposed in the SafePal data breach? The breach exposed names, email addresses, shipping addresses, phone numbers, and purchase information for about 39,798 customers who ordered between March 2, 2025 and April 11, 2026. Wallet seed phrases, private keys, passwords, bank details, payment card numbers, and government IDs were not exposed, and no wallets or funds were compromised. _Track breach disclosures like this on daily.dev to know when to check if your own accounts were exposed._ ### How did attackers steal SafePal customer order data? Attackers exploited an authorization flaw in the order-tracking function of a plug-in used by SafePal's e-commerce system, which allowed unauthorized access to other customers' order information. SafePal found the flaw during a full review and rebuild of its order-processing system started in July, after first receiving a related report in early May 2026. _Follow root-cause writeups like this on daily.dev when hardening your own order-processing systems._ ### Do SafePal hardware wallet users need to move their crypto after the data breach? No, customers do not need to replace hardware wallets or move cryptocurrency solely because their order information was exposed, since wallet seed phrases and private keys were not part of the stolen data. However, anyone who already shared a seed phrase or private key in response to a phishing email or call should treat that wallet as compromised and transfer assets to a new one. _Stay ahead of phishing fallout from incidents like this by following security news on daily.dev._ ## Similar posts on daily.dev - [Crypto hardware wallet owners face fresh security risks after recent spate of personal data thefts](https://daily.dev/posts/crypto-hardware-wallet-owners-face-fresh-security-risks-after-recent-spate-of-personal-data-thefts-cfoxbggml) · TechCrunch · 0 upvotes · 0 comments - [Scammers target hundreds of thousands of crypto owners after Trezor confirms data breach of email provider](https://daily.dev/posts/scammers-target-hundreds-of-thousands-of-crypto-owners-after-trezor-confirms-data-breach-of-email-pr-je4d4ipgf) · TechCrunch · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#crypto](https://daily.dev/tags/crypto), [#phishing](https://daily.dev/tags/phishing), [#data-breach](https://daily.dev/tags/data-breach) [View this post on daily.dev](https://daily.dev/posts/safepal-data-breach-impacts-39-798-customers-stolen-info-for-sale-dzgepjwhn) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"SafePal data breach impacts 39,798 customers, stolen info for sale","url":"https://daily.dev/posts/safepal-data-breach-impacts-39-798-customers-stolen-info-for-sale-dzgepjwhn","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/safepal-data-breach-impacts-39-798-customers-stolen-info-for-sale-dzgepjwhn"},"datePublished":"2026-08-16T23:50:13.098Z","dateModified":"2026-08-17T09:09:24.435Z","description":"Cryptocurrency hardware wallet maker SafePal disclosed a data breach affecting roughly 39,798 customers who placed orders between March 2, 2025, and April 11,...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/35d9b471b167ddff2ad126b86f10ce92?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/35d9b471b167ddff2ad126b86f10ce92?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"BleepingComputer","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"BleepingComputer","logo":"https://media.daily.dev/image/upload/s--as8nJ3qy--/f_auto,q_auto/v1774959951/logos/bleepingcomputer?_a=BAMAMiWQ0","url":"https://daily.dev/sources/bleepingcomputer"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/safepal-data-breach-impacts-39-798-customers-stolen-info-for-sale-dzgepjwhn","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,crypto,phishing,data-breach","timeRequired":"PT4M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"BleepingComputer","item":"https://daily.dev/sources/bleepingcomputer"},{"@type":"ListItem","position":3,"name":"SafePal data breach impacts 39,798 customers, stolen info for sale"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/safepal-data-breach-impacts-39-798-customers-stolen-info-for-sale-dzgepjwhn#faq","mainEntity":[{"@type":"Question","name":"What customer data was exposed in the SafePal data breach?","acceptedAnswer":{"@type":"Answer","text":"The breach exposed names, email addresses, shipping addresses, phone numbers, and purchase information for about 39,798 customers who ordered between March 2, 2025 and April 11, 2026. Wallet seed phrases, private keys, passwords, bank details, payment card numbers, and government IDs were not exposed, and no wallets or funds were compromised. Track breach disclosures like this on daily.dev to know when to check if your own accounts were exposed."}},{"@type":"Question","name":"How did attackers steal SafePal customer order data?","acceptedAnswer":{"@type":"Answer","text":"Attackers exploited an authorization flaw in the order-tracking function of a plug-in used by SafePal's e-commerce system, which allowed unauthorized access to other customers' order information. SafePal found the flaw during a full review and rebuild of its order-processing system started in July, after first receiving a related report in early May 2026. Follow root-cause writeups like this on daily.dev when hardening your own order-processing systems."}},{"@type":"Question","name":"Do SafePal hardware wallet users need to move their crypto after the data breach?","acceptedAnswer":{"@type":"Answer","text":"No, customers do not need to replace hardware wallets or move cryptocurrency solely because their order information was exposed, since wallet seed phrases and private keys were not part of the stolen data. However, anyone who already shared a seed phrase or private key in response to a phishing email or call should treat that wallet as compromised and transfer assets to a new one. Stay ahead of phishing fallout from incidents like this by following security news on daily.dev."}}]} ```