SafePal Says Order-Tracking Plugin Flaw Exposed Data for Nearly 40,000 Customers

Crypto wallet provider SafePal disclosed a data breach that exposed order information for nearly 40,000 customers, according to reporting published on Aug. 16, 2026. The company said the incident was related to an authorization flaw in an order-tracking plugin that allowed unauthorized access to customer order data ^{[1] [2] [3]}.

SafePal reported that approximately 39,798 customers who placed orders between March 2, 2025 and April 11, 2026 were affected, and that exposed details included customer names, email addresses, shipping addresses, phone numbers, and purchase information. Multiple reports state that seed phrases, private keys, wallet passwords, payment information, and government-issued ID numbers were not affected, and that SafePal found no evidence of wallet access or loss of customer funds ^{[2] [3]}.

The breach underscores the importance of secure implementations in consumer-facing crypto services, with SafePal emphasizing that sensitive wallet credentials were not compromised ^{[3] [4]}.