SafePal Discloses Data Breach Hitting Nearly 40,000 Customers

Crypto hardware wallet provider SafePal has disclosed a data breach that compromised the order information of nearly 40,000 customers, the company revealed in a public statement. The incident marks a significant security event for a firm trusted by users to safeguard digital assets, raising immediate concerns about the exposure of personal and transactional data tied to physical wallet purchases.

While the precise details of what specific data fields were accessed were not fully elaborated in the disclosure, order information typically encompasses names, shipping addresses, email addresses, and purchase details — the kind of data that can be leveraged in phishing campaigns or targeted social engineering attacks against crypto holders. Security researchers note that crypto wallet customers are particularly high-value targets for bad actors, given the potential financial stakes involved.

Read more Stripe Reportedly Acquires OpenRouter in $7B-Plus Deal →

SafePal, which produces hardware wallets designed to store cryptocurrency private keys offline, has positioned itself as a security-first brand in the competitive crypto hardware market. A breach of customer order records, even absent direct access to wallet keys or funds, can erode the trust that such companies depend on to attract and retain security-conscious users.

The incident underscores the persistent vulnerability of customer databases even at companies whose core product is security. Hardware wallet makers collect and store conventional e-commerce data just like any retailer, creating a gap between their product's security promise and the operational risks of running an online business. Affected customers are advised to be vigilant against unsolicited communications and potential phishing attempts referencing their SafePal orders.

Continue reading at CoinDesk.