SafePal said on Aug. 16 that a security flaw in its order-tracking plugin allowed unauthorized access to some customer order records. The company said around 39,798 users were affected, all of whom placed orders between March 2, 2025, and April 11, 2026. The exposed information included names, email addresses, shipping addresses, phone numbers, and purchase details.
SafePal said wallet data remained secure throughout the incident. The company added that mnemonic phrases, private keys, wallet passwords, bank account information, payment card numbers, and government-issued identity documents were not involved. According to the announcement, the issue has been fixed and additional security measures have been added.
All affected customers have already been notified individually by email. SafePal also launched an official verification page that lets users check whether they were affected by entering their order number and shipping country. The company apologized for the incident and urged users not to share mnemonic phrases, private keys, or passwords with anyone, while staying alert to phishing attempts and impersonation scams. SafePal said follow-up updates will continue to be posted on its official blog.
SafePal said on Aug. 16 that a security flaw in its order-tracking plugin led to unauthorized access to some customer order information.
The company said about 39,798 customers were affected. All of them placed orders between March 2, 2025, and April 11, 2026. The exposed data included names, email addresses, shipping addresses, phone numbers, and purchase details.
SafePal said wallets, mnemonic phrases, and private keys remained secure at all times. It also said the incident did not involve mnemonic phrases, private keys, wallet passwords, bank account information, payment card numbers, or government-issued identity documents.
The issue has now been fixed, and SafePal said it has added extra security measures. All affected customers have already been notified individually by email.
SafePal also released an official verification page where users can check whether they were affected by entering their order number and shipping country. The company apologized and reminded users not to disclose mnemonic phrases, private keys, or passwords to anyone, and to stay alert to phishing and impersonation attempts. It said further updates will be posted on its official blog.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
