SafePal Data Breach Exposes Information of 40,000 Crypto Users

Crypto hardware wallet provider SafePal has officially disclosed a data breach that compromised the order information of nearly 40,000 users. The company identified the incident after detecting unauthorized access to its customer database. The exposed data primarily includes names, shipping addresses, and purchase history related to wallet orders. While the breach involves sensitive personal information, SafePal maintains that private keys and recovery phrases remain secure. This incident highlights the ongoing privacy risks associated with purchasing hardware security devices through centralized platforms.

The breach reportedly occurred through a vulnerability in a third-party logistics or commerce platform used to manage global orders. SafePal stated that hackers did not penetrate its core cold storage architecture. The company has begun notifying affected users and is implementing more rigorous security audits for its external service providers. This disclosure comes at a time of increased scrutiny for crypto firms following several high-profile phishing attacks targeting hardware wallet owners. SafePal is advising users to remain vigilant against potential physical and digital social engineering attempts.

This breach holds significant relevance for India, where SafePal has a substantial user base due to the country's booming interest in self-custody solutions. Indian retail investors often prefer SafePal for its affordability and ease of use compared to more expensive alternatives. The exposure of physical addresses poses a unique security risk, as it could facilitate targeted physical theft or harassment. Users in India are urged to monitor their communications for sophisticated phishing emails. This event may accelerate local demand for indigenous or more localized hardware wallet distribution channels that minimize data exposure.