Digital Wallet
By Maheen Hernandez
1 / 15
How the Breach Went Undetected for Months. The timeline here is pretty telling. A phishing report landed in SafePal's inbox in early May.
2 / 15
Phishing Risk Is the Real Threat Now. The breach didn't touch wallets directly. But the exposed data — names, addresses, phone numbers,…
3 / 15
What SafePal Is Doing Next. SafePal set up a dedicated support channel for users reporting financial losses and said it's…
4 / 15
SafePal went public on August 16 with a data breach. Nearly 40,000 customers had their personal details exposed through a flaw in an order-tracking plugin — and the company…
5 / 15
The numbers are specific: 39,798 users. Orders placed between March 2, 2025, and April 11, 2026.
6 / 15
Worth noting: no seed phrases. No private keys. No wallet passwords, no payment card numbers, no government ID numbers.
7 / 15
And there's another layer to it. SafePal also disclosed that a data-cleanup process had malfunctioned.
8 / 15
SafePal says it has since rebuilt the order-processing system from the ground up. It's also cut personal data retention down to 90 days, in line with legal requirements.
9 / 15
The breach didn't touch wallets directly. But the exposed data — names, addresses, phone numbers, purchase history — is basically a phishing kit. SafePal knows it, and said so.
10 / 15
See also: Trezor Data Breach Hits 13,689 Customers Through Logistics Partner Leak
11 / 15
SafePal was direct about the risk: the exposed information can and probably will be used to craft convincing phishing attempts targeting affected users.
12 / 15
For users who think they may have already entered sensitive information into a suspicious site, SafePal's guidance is to treat those wallets as compromised and move assets to a…
13 / 15
Unclear still: who accessed the data, and how much was lost through phishing. SafePal said it hasn't identified the unauthorized party and can't confirm the total amount lost.
14 / 15
SafePal set up a dedicated support channel for users reporting financial losses and said it's working with on-chain asset-tracing specialists to help those cases.
15 / 15
An independent third-party security firm is being brought in to validate the fixes and run a broader review of SafePal's systems.
The Currency Analytics
Want the full story?