SafePal, a crypto hardware wallet provider, revealed a data breach that exposed personal order details of 39,798 customers from March 2025 to April 2026. The breach exposed names, addresses, and contact info due to an authorization flaw in their order tracking system, but crucial crypto security elements like private keys, seed phrases, and funds were not compromised. SafePal has patched the vulnerability, notified affected users, and removed related phishing sites. Users are advised to be cautious of phishing attempts and to transfer assets if they shared private keys or seed phrases.