SafePal breach exposes data of 39,798 customers

• SafePal said an access-control flaw exposed order data belonging to about 39,798 customers.
• The affected records included names, contact details, addresses and purchase information.
• SafePal said seed phrases, private keys, wallet passwords and customer funds were not exposed.

SafePal said a security incident exposed order information belonging to about 39,798 customers.

The affected orders were placed between 2 March and 11 April 2026, according to the company.

“This incident did not involve your seed phrase, private keys, wallet password, or other wallet credentials,” SafePal said in a blog post.

The flaw allowed an unauthorised person to view another customer’s order information under certain conditions.

SafePal said it fixed the issue and added security controls to the affected order system.

The company warned that stolen order details could support phishing emails, calls, messages and fake delivery or refund offers.

SafePal said it hired an independent cybersecurity firm and reduced personal order data retention to 90 days.