#SafePalOrderDataLeak
About SafePalOrderDataLeak
SafePal says a flaw in an order-tracking plugin exposed data from ~39,798 customers. Records from Mar 2, 2025 to Apr 11, 2026 included names, contact details, shipping addresses and purchase histories. The flaw is fixed; wallet systems, seed phrases, private keys and payment card data were unaffected. Yet users reported phishing in May using real order and address details, with scammers citing device issues, refunds or firmware updates. Are users safe just because private keys were not leaked?
Hot
Latest
SafePalOrderDataLeak Popular posts
Pinned
SafePal nearly 40,000 user information leaked, is a hardware wallet not as good as a spare iPhone?
Original | Odaily Planet Daily (@OdailyChina)
Author | Asher (@Asher_ 0210)
On August 16, hardware wallet manufacturer SafePal announced that the plugin used for its order tracking feature had an authorization flaw, which under certain circumstances allowed external parties to access other users' order information without authorization. This incident affected approximately 39,798 customers and involved some orders between March 2, 2025, and April 11, 2026. The leaked information included names,
⚠️ALERT: SafePal discloses a data breach exposing nearly 40,000 customers' names, home addresses and phone numbers.
A flaw in the hardware wallet maker's order tracking plugin allowed unauthorized access to order details for more than a YEAR, with over 30 phishing sites tied to the stolen data already taken down.
SafePal says seed phrases, private keys and customer funds are NOT affected.
$SLP $BTC #BTCETFsVsLeverage
ALERT: SafePal discloses a data breach exposing nearly 40,000 customers' names, home addresses and phone numbers.
A flaw in the hardware wallet maker's order tracking plugin allowed unauthorized access to order details for more than a YEAR, with over 30 phishing sites tied to the stolen data already taken down.
SafePal says seed phrases, private keys and customer funds are NOT affected.
$SAFE
SafePal says approximately 39,798 customers were affected by a flaw in its order-tracking system. The incident exposed names, emails, phone numbers, shipping addresses, and order details, but did not affect seed phrases, private keys, wallet passwords, or crypto assets.
The vulnerability has been patched and additional security measures introduced. #XiaomiEarningsWatch #30YYieldHits2007High #SanDiskLongTermDeals
SafePal says approximately 39,798 customers were affected by a flaw in its order-tracking system. The incident exposed names, emails, phone numbers, shipping addresses, and order details, but did not affect seed phrases, private keys, wallet passwords, or crypto assets.
The vulnerability has been patched and additional security measures introduced. (DYOR). $SAFE #XiaomiEarningsWatch #30YYieldHits2007High #SanDiskLongTermDeals
The important distinction is between cryptographic safety and user safety. SafePal says roughly 39,798 customers had names, contact details, shipping addresses and purchase histories exposed through an order-tracking plugin, while wallet systems, seed phrases, private keys and card data were unaffected.
That limits direct wallet compromise, but it does not make the incident low-risk. Real order and address details can make phishing about device issues, refunds or firmware updates unusually convincing, as user reports in May illustrate. The fix closes the flaw; sustained skepticism toward personalized support messages remains the stronger defense. Not advice, just analysis.
#SafePalOrderDataLeak
