By Isaac • August 17, 2026 7:08 am •
SafePal says a flaw in an order-status plug-in exposed personal information tied to nearly 40,000 customers, creating a fresh phishing and physical-security concern for hardware-wallet owners.
The important dividing line is what the attackers did not get. SafePal says wallet credentials, seed phrases and private keys remained secure.
Trending: A huge pagan statue just went up in Texas. Is this the Western civilization we should be cheering?
The breach hit customer information around the purchase, while the wallets themselves continued doing their cryptographic job.
But that does not make the incident harmless.
According to Decrypt, the exposed information covered roughly 39,798 customers who placed orders between March 2, 2025, and April 11, 2026. The data included names, email addresses, shipping addresses, phone numbers and purchase details.
SafePal said bank details, payment card numbers, government identification,
Continue reading
Join the conversation!
Please share your thoughts about this article below. We value your opinions, and would love to see you add to the discussion!