SafePal disclosed that a flaw in an order-tracking plug-in gave attackers unauthorized access to the personal data of approximately 39,798 customers, including names, email addresses, shipping addresses, phone numbers, and purchase details. Wallet credentials such as seed phrases, private keys, and passwords were not compromised. The data breach has raised concerns about physical attacks, with Chainalysis documenting 46 violent incidents and over $30 million stolen in wrench attacks during the first half of 2026. SafePal joins a growing list of wallet firms hit by leaks, including Trezor, whose ShipMonk breach exposed around 13,700 customers, and Ledger, whose 2020 leak compromised approximately 272,000 customers.
Source: Read the original article
