SafePal latest crypto hardware wallet maker affected by breach, with nearly 40,000 impacted
The crypto hardware wallet company SafePal confirmed a data breach on Sunday, telling users that nearly 40,000 customers had information stolen during a recent security incident.
The company said the incident impacted information from people who placed orders between March 2, 2025 and April 11, 2026. The stolen information includes names, email addresses, shipping addresses, phone numbers and purchase details.
SafePal is the third hardware wallet manufacturer to be attacked over the last month after both Trezor and Coinkite dealt with security issues impacting the information for thousands of customers who own cryptocurrency.
SafePal did not provide details on how the hackers gained access to the data, only writing in a blog post that the company recently identified a flaw “in the order-tracking function for a plug-in associated with customer order information.”
“Under certain conditions, the flaw allowed unauthorized access to another customer's order information,” the company said, adding that the issue has since been remediated.
The company reiterated that all SafePal wallets, seed phrases and private keys are secure. All impacted customers have been notified by email and a website has been created for people to see if they were affected.
SafePal warned that those impacted will likely be targeted by sophisticated phishing attempts that will include phone calls, emails, texts, refund offers and fake customer support messages. A hacker last advertised information allegedly stolen from the company on a dark web cybercriminal forum.
People use hardware wallets because they are intended to be a more secure option to store cryptocurrency. Data breaches that reveal details about digital currency holders have the potential to expose them to “wrench” attacks — the industry’s term for in-person, violent incidents where crypto owners are threatened and forced to hand over their digital assets.
According to the blockchain security audit company CertiK, the first half of 2026 has seen a 33 percent year-over-year increase in wrench attacks. Using publicly available information and other verified sources, the company found 52 wrench attacks worldwide through June, up from 39 during the same period in 2025.
Examples include the kidnapping of a French mother and child in April, a 2025 home invasion in Minnesota and a 2024 case in Connecticut involving a carjacked Lamborghini. The losses have reached $124 million so far this year, compared with $10.5 million reported in the first half of 2025.
Last week, a cryptocurrency investor Harry Chun Tak Yeh was found dead after falling from his luxury 30th floor apartment in Paraguay. Police found his door open and said his home had been ransacked.
References in this story
- Unauthorized Access To A Subset Of Customer Order Information | SFP | SafePal Crypto Wallet www.safepal.com Unauthorized Access To A Subset Of Customer Order Information,SafePal Crypto Wallet Blog Home Page,SFP,SafePal App
- Recent customer data exposed in shipping provider incident trezor.io ShipMonk, one of Trezor’s shipping providers, has experienced a data breach that exposed sensitive customer order data, including full names, physical addresses, phone numbers, and email addresses. Trezor devices are…
- Bitcoin hardware wallet maker destroys some inventory after more than $88 million stolen therecord.media The company behind a popular hardware wallet for bitcoin owners was forced to destroy part of its inventory after thieves siphoned more than $88 million from customers through a firmware vulnerability.
- SafePal Crypto Wallet - Scam Protection www.safepal.com SafePal is the best crypto wallet to secure and manage cryptocurrencies and NFTs, such as Bitcoin, Etherem and ERC20 tokens, BNB, and BAYC. You can easily swap, bridge, trade and yield crypto APY. SafePal wallet is…
- Dark Web Informer (@DarkWebInformer) on X x.com 🚨 SafePal customer order data allegedly advertised for sale on a cybercrime forum ⠀ A forum seller is advertising customer information allegedly connected to a SafePal order plugin data breach. The poster claims the…
- 'Wrench' attacks against crypto holders appear to be on the rise therecord.media There are more reports than ever before of strong-arm tactics like home invasions and kidnappings against cryptocurrency holders, researchers say.
- CertiK Intel3D H1 2026 Wrench Attacks - CertiK www.certik.com 52 verified wrench attacks and $124.1 million in recorded exposure in H1 2026: a 33.3% rise in incidents, an 11.8-fold rise in losses, and a threat that has narrowed into a Western European crisis.
- www.justice.gov
- www.justice.gov
- Investigan muerte de chino que cayó del piso 30 www.latribuna.com.py El cuerpo sin vida de un ciudadano chino apareció tendido en el suelo al pie del edificio Jade Park, uno de los complejos residenciales más altos de la zona del...
- Advanced Cyber Threat Intelligence | Recorded Future www.recordedfuture.com Get real-time, actionable cyber threat intelligence with Recorded Future. Mitigate cyber risks, prioritize threats, and proactively secure your organization.
- jon greig (@jgreigj) on X twitter.com @TheRecord_Media cybersecurity reporter. formerly @zdnet @cambodiadaily @haitiantimes_ — send tips to [email protected] or signal: jgreig.51
- jon greig (@jgreig.bsky.social) bsky.app cybersecurity reporter for The Record. formerly: zdnet, techrepublic, blavity, haitian times, cambodia daily — send tips to [email protected] or signal: jgreig.51
