Safepal Data Breach Exposes 40K Customers' Information
Order tracking plugin vulnerability put thousands of users' personal data at risk.
1Large-Scale Data Breach
Safepal, a hardware wallet manufacturer, disclosed that personal data of 39,798 customers was leaked. The breach originated from a security flaw in an order tracking plugin. Between March 2, 2025 and April 11, 2026, customers' names, email addresses, shipping details and phone numbers were compromised. The company assured that wallet passwords and private keys remained secure.
2Criticism Over Delayed Disclosure
Security researcher Tay emphasized that the company had been receiving reports of phishing attempts since April but only disclosed it now. Blockchain investigator Specter confirmed cases reported during spring and summer that might be linked to this leak. One customer claimed their data was deleted before the disclosure, criticizing the company's data retention policies.
3Enhanced Security Measures
Safepal announced it fixed the issue and implemented new security measures. Steps included reducing data retention period to 90 days and taking down 30 fraudulent websites connected to scam schemes. However, experts warn that exposure of shipping addresses could create physical attack risks for users. 'Wrench attacks' targeting crypto holders have been increasing, particularly in France.
4Other Industry Breaches
Safepal's announcement follows a data breach at Shipmonk, Trezor's shipping provider, where full names, email addresses, phone numbers and shipping addresses of 11,742 customers in the US, UK, Sweden, Colombia, Brazil, Italy and Portugal were exposed. Consecutive data breaches in the crypto sector are raising concerns about user security.
5Phishing Risks
The company warned that the breach could lead to sophisticated phishing attempts including fake customer support communications, malicious websites, fraudulent firmware update requests and scam phone calls. Users are strongly advised not to share wallet credentials or additional personal information. Experts note the data wasn't likely used just for phishing.
6Physical Attack Threat
Security experts highlight that exposure of shipping addresses creates not just digital but physical risks for users. So-called 'wrench attacks' targeting crypto holders, where victims are coerced to empty their wallets, have been increasing, particularly in France. This type of physical threat becomes more likely with address information leaks.
7Customer Backlash
Affected customers are criticizing the company's data retention policies and delayed disclosure. Some users claim their data was deleted before the announcement, complaining about lack of transparency. Customers are demanding enhanced security measures and quicker response times from the company.
8Industry-Wide Security Alarm
Consecutive data breaches at Safepal and Trezor are sounding industry-wide alarms about crypto storage solution security. Protection of users' personal data and timely disclosures are becoming mandatory expectations. These incidents demonstrate that hardware wallet manufacturers need to review their security protocols.
Original article: Bitcoin News — Safepal'da Veri İhlali: 40 Bin Müşterinin Bilgisi Sızdırıldı