Cryptocurrency wallet provider, SafePal, has disclosed a data breach that exposed order information belonging to about 39,798 customers, including

• names,
• addresses,
• contact details, and
• purchase data.

The breach was caused by an authorization flaw in SafePal’s order-tracking system that allowed users to access another customer’s order information between March 2 2025 – April 11 2026, the company said.

SafePal said the incident did not expose cryptocurrency funds, seed phrases, private keys, wallet passwords, bank account or payment card information, or government-issued identification numbers.

The company warned that the exposed information could nevertheless be used in targeted phishing and…