Crypto wallet provider SafePal discloses data breach affecting nearly 40,000 users' order information 

Read a summary of this article on FAST.
Get bite-sized news via a new
cards interface. Give it a try.
Click here to return to FAST Tap here to return to FAST
FAST

(Corrects day of week in paragraph 1 to Sunday)

Aug 16 : Cryptocurrency wallet provider SafePal on Sunday disclosed a data breach that involved unauthorized access to about 39,798 customers' order information, including personal details such as names, addresses and purchase data. 

Here are some details:

• An authorization flaw in the order tracking system allowed access to another customer's order information between March 2, 2025, and April 11, 2026, SafePal said in a statement.

CNA Games

Guess Word
Crack the word, one row at a time

Buzzword
Create words using the given letters

Mini Sudoku
Tiny puzzle, mighty brain teaser

Mini Crossword
Small grid, big challenge

Word Search
Spot as many words as you can
Show More
Show Less

• SafePal provides a suite of secure crypto-management tools including hardware wallets, mobile and browser wallets to help people store and use digital assets, according to its website.

• The breach did not involve access to "seed phrases," private keys, wallet passwords, bank account and payment card information or government-issued identification numbers.

• Wallet passwords are usually alphanumeric. The wallet provider also offers a set of randomized words, known as seed phrases, for additional security. Both of these are known only to the user. If customers lose the passwords and phrases, access to their wallets is cut off.

• As a result of the breach,  affected users' order information could be used for targeted phishing and impersonation attempts, the firm said.

• SafePal said it had fixed the issue and introduced further security measures in response, adding that it would retain customers' personal data in its order processing system for only 90 days.

• The crypto hardware wallet provider said it has identified and taken down more than 30 fraudulent websites and phishing links tied to the breach.

Newsletter

Week in Review

Subscribe to our Chief Editor’s Week in Review

Our chief editor shares analysis and picks of the week's biggest news every Saturday.

Sign up for our newsletters

Get our pick of top stories and thought-provoking articles in your inbox

Subscribe here

Get the CNA app

Stay updated with notifications for breaking news and our best stories

Download here

Get WhatsApp alerts

Join our channel for the top reads for the day on your preferred chat app

Join here