Hardware wallet maker SafePal reported a data breach exposing personal information of 39,798 customers who ordered between 02.03.2025 and 11.04.2026.

Scope of the incident

According to SafePal, attackers obtained names, email addresses, phone numbers, shipping addresses and order details for about 39,798 customers affected during the stated period.

• Names and email addresses.
• Phone numbers and shipping addresses.
• Order details and related purchase information.

Security impact and company response

SafePal emphasized that seed phrases, private keys, passwords and payment data were not compromised in the incident and remain secure according to the company.

The firm warned of an increased risk of targeted phishing attacks, noting that exposed contact and order information could be used to impersonate customer support representatives.

SafePal said it has patched the vulnerability that led to the breach and has taken steps to mitigate ongoing threats, including blocking more than 30 fraudulent websites and phishing links related to the attack.

Recommendations for customers

Customers are advised to remain vigilant for suspicious messages and to verify any communication claiming to be from SafePal through official channels before acting on requests for account details.