Skip to content
WorldBrand.AI

SafePal controversies

Controversies tied to this brand in public sources. A listing is not a finding of fault.

Back to profile2 entries

  1. 2026

    SafePal discloses data breach affecting nearly 40,000 customers

    Hazard disclosure

    SafePal, a cryptocurrency hardware wallet provider, notified approximately 39,798 customers of a data breach resulting from an exploited authorization flaw in its order-tracking system. The breach occurred between March 2, 2025, and April 11, 2026, and exposed customer names, email addresses, shipping addresses, and phone numbers. SafePal stated that wallet seed phrases, private keys, passwords, and payment card information were not compromised, and that there was no evidence customer wallets or funds were accessed. The company reported that it fixed the vulnerability, implemented additional security measures, and took down more than 30 fraudulent websites and phishing links.

    Company response

    • Remediation — SafePal

      SafePal has since fixed the vulnerability and implemented additional security measures, working with a third-party security firm to validate the fix.

    • Ongoing disclosure — SafePal

      Affected customers have been notified via email and can use an online verification tool to check if their order details were stolen.

    Source excerpt

    • SafePal has since fixed the vulnerability and implemented additional security measures, working with a third-party security firm to validate the fix.
    • cryptocurrency hardware wallet provider SafePal is alerting approximately 39,798 customers to a data breach resulting from an exploited flaw in its order-tracking system
    • The breach, which occurred between March 2, 2025, and April 11, 2026, exposed customer names, email addresses, shipping addresses, and phone numbers.
    Source

  2. 2026

    SafePal discloses data breach affecting 39,798 customers

    Issue disclosure

    SafePal published an update on August 16 stating that order information linked to 39,798 customers who placed orders between March 2, 2025 and April 11, 2026 was compromised in a data breach. The stolen data included names, email and shipping addresses, phone numbers and purchase details. SafePal said the incident stemmed from a vulnerability in its order-tracking function for a plug-in that allowed unauthorized access to another customer's order information, and that it remediated the issue and added security measures. The company warned customers about phishing attempts and said it had taken down over 30 fraudulent websites and phishing links.

    Company response

    • Remediation — SafePal

      We remediated the issue upon discovery and introduced additional security measures

    • Ongoing disclosure — SafePal

      SafePal published an update on August 16 claiming that order information linked to 39,798 customers had been compromised in a recent incident.

    Source excerpt

    • Under certain conditions, the flaw allowed unauthorized access to another customer's order information. We remediated the issue upon discovery and introduced additional security measures
    • SafePal published an update on August 16 claiming that order information linked to 39,798 customers had been compromised in a recent incident.
    • The breach appears to have stemmed from a vulnerability in the firm’s order-tracking function for a plug-in.
    Source