SafePal Bitcoin Wallet Data Breach Stokes Fears of Physical Attacks

Summary

SafePal said an order-tracking plug-in flaw exposed personal data for about 39,798 customers who ordered between March 2, 2025, and April 11, 2026. The exposed information included names, emails, shipping addresses, phone numbers, and purchase details. SafePal said wallet credentials were not compromised: seed phrases, private keys, passwords, bank details, payment card numbers, and government IDs were not involved. The issue has been fixed, affected users were emailed, and a check tool was launched. No funds were stolen, but the leak could help criminals target crypto holders through phishing, extortion, or physical “wrench attacks.” The breach comes amid rising violence tied to crypto theft and follows similar customer-data leaks at other wallet firms, including Trezor and Ledger. SafePal apologized and said it will continue investigating and posting updates.