A crypto hardware wallet provider is disclosing an authorization flaw in its order-tracking plug-in that exposed sensitive customer order details.
SafePal says the flaw allowed unauthorized external access to names, email addresses, shipping addresses, phone numbers, and purchase details for approximately 39,798 customers who placed orders from March 2nd, 2025, to April 11th, 2026.
Information including name, email address, shipping address, phone number, and purchase details, was accessed externally without authorization due to the flaw.”
The company says no wallet credentials or financial data were involved or stored.
SafePal says it fixed the flaw upon discovery, implemented additional security measures, engaged a third-party auditor, and tightened data retention to 90 days.
All affected customers received individual email notifications from security@safepal.com on August 16th.
The company has also taken down more than 30 fraudulent websites and phishing links while opening a dedicated support channel.
Customers can verify their status on a dedicated webpage using their order ID and shipping country.
Follow us on X, Facebook and Telegram
Don't Miss a Beat – Subscribe to get email alerts delivered directly to your inbox
Disclaimer: Opinions expressed at The Daily Hodl are not investment advice. Investors should do their due diligence before making any high-risk investments in Bitcoin, cryptocurrency or digital assets. Please be advised that your transfers and trades are at your own risk, and any losses you may incur are your responsibility. The Daily Hodl does not recommend the buying or selling of any assets including cryptocurrencies, nor is The Daily Hodl an investment advisor. Please note that The Daily Hodl participates in affiliate marketing.
Generated Image: Midjourney
The post SafePal Discloses Authorization Flaw Exposing Order Details of Nearly 40,000 Customers appeared first on The Daily Hodl.
