SafePal Says 39,798 Customers Hit by Data Breach

SafePal disclosed an authorization flaw in an order-tracking plugin that allowed external access to order information for about 39,798 customers (names, emails, shipping addresses, phone numbers and purchase details) for orders placed between March 2, 2025 and April 11, 2026; the company says seed phrases, private keys, wallet passwords, payment card numbers and government IDs were not exposed. The stolen data is being advertised on a cybercrime forum, prompting customer notifications, remediation (patch, retention reduction, independent review) and monitoring for phishing sites and fraudulent activity.