The crypto wallet industry is facing a new data breach. SafePal confirmed on Saturday that a flaw affecting an order tracking plugin allowed unauthorized access to the information of 39,798 customers. The data concerns orders placed over more than a year and includes several personal information. However, no wallet identifier, fund, recovery phrase or private key was compromised, according to details provided by the company in its official announcement published on Saturday.
In brief
- A data breach affected 39,798 SafePal customers who placed an order between March 2025 and April 2026.
- The information exposed includes names, emails, shipping addresses, phone numbers and purchase details.
- Private keys, recovery phrases, passwords and crypto funds have not been compromised according to SafePal.
- The incident comes after leaks at Trezor and Ledger, as physical attacks against cryptocurrency holders progress.
A flaw in order tracking
In a statement published on On the other hand, data directly linked to wallet security remains outside the identified scope. Recovery phrases, private keys, passwords and wallet IDs were not affected.
Likewise, SafePal specifies that bank details, card numbers and official identification documents remain protected. The company claims to have fixed the flaw and contacted affected customers by email. It also created a page allowing users to check if their data is among the exposed information. The company finally plans to publish new information on its blog as its investigation continues.
SafePal faced with the risk of physical targeting
Even without direct theft of cryptocurrencies, this leak raises a particular question for Bitcoin holders. The association between an identity, an address and a crypto purchase can provide useful information to criminals. The risk takes on a more concrete dimension with the progression of physical attacks directly targeting holders. These attacks seek to obtain digital assets under threat or duress.
Chainalysis recorded 46 violent incidents in the first half of 2026, for more than $30 million stolen. According to available data, home burglaries are also becoming more frequent than kidnappings. In this context, SafePal joins several manufacturers whose users have already suffered the consequences of a leak. A few days before this case, Trezor had reported a compromise affecting approximately 13,700 customers after a breach at its delivery partner ShipMonk.
A series of leaks in the ecosystem
Ledger’s precedent remains more important in its magnitude. Its 2020 data breach affected around 272,000 customers and led to a wave of phishing attacks. Some users had also received ransom demands accompanied by threats of violence. More recently, the Coldcard exploit has further heightened concerns around the security of hardware wallets and self-held funds.
SafePal therefore intervenes in a period already marked by several incidents affecting crypto users. The company apologized to its community after the exposure was discovered. She now indicates that she wants to communicate new updates as her investigation progresses.
This communication also aims to clarify the limits of the incident and to distinguish commercial data from the elements necessary for access to cryptocurrencies. Users therefore have a clearer framework for assessing their immediate exposure. What happens next will depend in particular on the technical conclusions and additional information that the manufacturer publishes. The customers concerned will therefore have to follow the next communications from SafePal to know the precise evolution of the file.
Maximize your Tremplin.io experience with our ‘Read to Earn’ program! For every article you read, earn points and access exclusive rewards. Sign up now and start earning benefits.
