Digital Wallet

Story: SafePal Data Breach Exposes 39,798 Customers via Faulty Plugin

By Sakamoto Nashi

1 / 15

Why This Breach Really Worries. The real issue is what can be done with this data. A name, an address, a hardware wallet purchase…

2 / 15

SafePal Faces Its Customers: Apologies and Promises. SafePal has apologized to its community. The company emphasizes the distinction between commercial…

3 / 15

A Sector Under Increasing Pressure. Hardware wallet manufacturers occupy a unique position in the crypto ecosystem.

4 / 15

Nearly 40,000 customers affected. SafePal confirmed on Saturday: a flaw in an order tracking plugin allowed third parties to access personal data.

5 / 15

The compromised information covers orders placed between March 2, 2025, and April 11, 2026. Names, email addresses, delivery addresses, phone numbers, purchase details — all…

6 / 15

No crypto stolen. But that doesn't mean it's safe.

7 / 15

The real issue is what can be done with this data. A name, an address, a hardware wallet purchase — that's enough to know someone likely holds digital assets. And that's a target.

8 / 15

The risk of phishing follows the same logic. An attacker who knows you ordered a SafePal wallet can craft a very credible phishing email — fake security alert, fake customer…

9 / 15

And SafePal is not alone in this situation. Trezor recently reported a similar breach, affecting 13,700 customers.

10 / 15

SafePal has apologized to its community. The company emphasizes the distinction between commercial data and critical wallet security data — a clear line, according to them, that…

11 / 15

Related: Fuite de données de 39 798 clients de SafePal expose adresses et numéros de téléphone

12 / 15

That's the official version. In reality, the question is how a third-party plugin could access so much customer information without stronger safeguards in place.

13 / 15

More context: SafePal Breach Hits 39,798 Customers Through Order-Tracking Plugin Flaw

14 / 15

What is certain: SafePal says it is working to strengthen its security protocols, with more frequent audits and regular updates to its protection systems.

15 / 15

Thirty-nine thousand seven hundred ninety-eight. It's not abstract.

The Currency Analytics

Want the full story?