SafePal Data Breach Exposes Nearly 40,000 Customers’ Order Info

4 mins mins

SafePal, the self-custody crypto wallet provider, has disclosed a data breach that exposed the order information of nearly 40,000 customers, according to a report published on August 16, 2026. The SafePal data breach is limited to order-related records, and the disclosure does not indicate that user funds or wallets were compromised.

SafePal Data Breach Exposes Nearly 40,000 Customers' Order Info

The incident was detailed in reporting that SafePal revealed a data breach affecting close to 40,000 customers, with the exposed data described as customer order information. For related coverage, see SafePal and 1inch Launch Limited-Edition Hardware Wallets.

What SafePal disclosed about the breach

The core of the disclosure is narrow: SafePal said an incident exposed order information tied to its customer base, affecting nearly 40,000 people. The company is known for its hardware and software wallets, including a recent limited-edition hardware wallet built with 1inch. For related coverage, see BiggerZ: Building a Fairness-First Crypto Casino, Sportsbook and Prediction Markets Platform.

SafePal has communicated with users through its official account on X. Readers should treat that channel and other verified company pages as the authoritative source for further updates. For related coverage, see Bitwise Eyes Tokenized BSOL Shares With Superstate.

What is confirmed versus what is not

Confirmed: a breach occurred, the affected group is close to 40,000 customers, and the exposed data is order information. Not confirmed in the available disclosure: any exposure of private keys, seed phrases, wallet balances, or direct access to customer funds. For related coverage, see FT: JPMorgan Ended Polymarket Ties but Eyes IPO Role.

What order information can include

In a purchase context, order information generally refers to records tied to a transaction, such as items bought, order identifiers, and the contact or shipping details a customer provides at checkout. The disclosure specifies order info rather than wallet credentials.

Why order data can still be sensitive

Even without wallet access, exposure of order records can reveal that a person is a crypto hardware wallet buyer, which is information that can be misused. That association is what makes this category of data meaningful despite the limited scope described.

Why the breach matters for crypto users

The main user risk from exposed order data is targeted phishing and social engineering. Attackers who know a person purchased a specific wallet product can craft convincing fake support messages or shipping notices designed to extract credentials.

SafePal maintains a dedicated scam protection resource outlining how it communicates with users, which is a useful reference point when judging whether an incoming message is legitimate.

Reputational versus financial impact

Because the disclosure does not describe fund loss, the more immediate effect is on user trust rather than direct financial damage. SafePal, which has expanded into products such as a Telegram wallet with Swiss bank accounts and CeDeFi features, relies on that trust across its product line.

What affected users should watch for

The practical steps are conservative. Monitor SafePal’s official channels for follow-up notices, and treat unsolicited emails, texts, or support outreach referencing an order with caution.

How to verify legitimate notifications

Cross-check any message against SafePal’s verified accounts before acting on it, and avoid clicking links or entering wallet details in response to unexpected contact. No legitimate provider will ask for a seed phrase.

FAQ about the SafePal data breach

How many customers were affected?

Nearly 40,000 customers, based on the disclosure.

What type of information was exposed?

Customer order information. The disclosure does not detail the full field-level contents beyond identifying it as order data.

Does the disclosure confirm wallet or fund exposure?

No. The available information refers only to order information and does not confirm exposure of private keys, seed phrases, or customer funds.

What should users do next?

Follow official SafePal communications, stay alert to phishing attempts referencing recent orders, and never share wallet credentials in response to unsolicited outreach.

Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.