Reported by 2 outlets

Timeline

1. original reporting

   SafePal data breach impacts 39,798 customers, stolen info for sale

   bleepingcomputer.com · 58d ago · August 16th, 2026

   Cryptocurrency hardware wallet provider SafePal is warning of a data breach affecting about 39,798 customers after a flaw was exploited to steal customer order information, and a threat actor is now claiming to be selling the stolen data. SafePal says the breach impacts customers who placed orders between March 2, 2025, and April 11, 2026, exposing their names, email addresses, shipping addresses, phone numbers, and purchase information. The company says the breach did not expose customers' wallet seed phrases, private keys, passwords, bank account information, payment card numbers, government-issued identification numbers, or other credentials. "No evidence has been found that the incident itself compromised access to SafePal wallets or funds," SafePal said in a security advisory published Sunday. The company says it notified all impacted customers via email on August 16 with the subject "[Important] Your SafePal Order Information Has Been Affected." SafePal has also launched an online verification tool that lets customers enter their order number and shipping country to determine whether the details of that order were stolen. The company warns that the stolen information could be used to conduct targeted phishing and other social engineering attacks, with customers reporting SafePal phishing emails and phone calls as early as May. Order-tracking flaw exposed customer data A threat actor now claims to be selling the stolen SafePal customer data on a cybercrime forum. As spot

2. mentioned by securityweek.com

   40,000 Impacted by SafePal Data Breach

   securityweek.com · 57d ago · August 17th, 2026