SafePal Discloses Order Plugin Security Incident: Approximately 39,800 Users' Information Exposed, Wallet Private Keys and Seed Phrases Unaffected

Odaily News - Crypto wallet service provider SafePal recently issued a security advisory stating that the company discovered a vulnerability in its order tracking plugin, which led to unauthorized access to some customer information.

SafePal stated that this incident affects approximately 39,798 users, involving customers who placed orders between March 2, 2025, and April 11, 2026. The leaked information includes names, email addresses, shipping addresses, phone numbers, and order-related data such as purchase records.

The company emphasized that this incident did not involve users' wallet security data, including seed phrases, private keys, wallet passwords, other wallet credentials, bank account information, payment card numbers, and government-issued identification documents, all of which remain unaffected.

SafePal stated that the relevant vulnerability has now been fixed, and additional security measures have been implemented to strengthen the order system's defenses. Affected users have received individual notifications via email, and users can also check whether they are affected through the official page by using their order number and shipping country.

SafePal reminds users to remain vigilant, not to disclose seed phrases, private keys, or passwords to anyone, and to be cautious of phishing emails, fake customer service, and other scams that may emerge in connection with this incident.