SafePal discloses order plugin security incident: approximately 39,800 users' information exposed, wallet private keys and seed phrases unaffected

Odaily Planet Daily News Crypto wallet service provider SafePal recently released a security announcement stating that the company discovered a vulnerability in its order tracking plugin, which led to unauthorized access to some customer information.

SafePal stated that this incident affected approximately 39,798 users, involving customers who placed orders between March 2, 2025 and April 11, 2026. The leaked information includes names, email addresses, shipping addresses, phone numbers, and order-related data such as purchase records.

The company emphasized that this incident did not involve users' wallet security data, including seed phrases, private keys, wallet passwords, other wallet credentials, bank account information, payment card numbers, and government-issued identification documents, all of which remained unaffected.

SafePal stated that the relevant vulnerability has now been fixed, and additional security measures have been implemented to strengthen the order system's protection. Affected users have received individual notifications via email, and users can also check whether they are affected through the official page using their order number and shipping country.

SafePal reminded users to remain vigilant, not to disclose seed phrases, private keys, or passwords to anyone, and to be cautious of phishing emails and fraudulent activities such as fake customer service that may arise in connection with this incident.