SafePal breach exposes order data for 40,000 buyers

SafePal, a crypto wallet maker backed by Binance, said Sunday that hackers got into its order-tracking system. A flaw let attackers see other customers' order information. Nearly 39,800 people are affected. Their names, emails, home addresses, and phone numbers were exposed. The leak covers orders placed between March 2025 and April 2026.

SafePal makes hardware wallets, small devices meant to keep crypto safe by storing it offline. The breach didn't touch anyone's coins or wallet keys. It leaked shipping and order records instead. That's the kind of data a scammer needs to send a convincing fake support message. SafePal says it fixed the flaw and added new safeguards. It has also taken down more than 30 fake websites built to phish affected customers.

Keep reading — what to watch

How many of those 39,800 people will get a phishing email that looks real enough to work? That's the actual risk now, not stolen crypto. SafePal says it will only keep order data for 90 days going forward. That's a shorter window than the year-plus this leak covered.