SafePal experienced a data breach affecting approximately 39,798 customers due to an authorization vulnerability in its Order Tracking Plugin. The exposed information includes names, email addresses, shipping addresses, phone numbers, and purchase details, while seed phrases, private keys, and customer funds remained secure. This breach occurs amid a broader trend of hardware wallet security incidents, following similar attacks on COLDCARD (over $111 million in Bitcoin stolen) and Trezor (13,689 customers’ PII exposed). Affected customers now face heightened phishing and impersonation risks, as attackers can leverage verified personal information for socially engineered attacks. SafePal has notified impacted users and states it has fixed the vulnerability, though actual financial losses from the breach remain unknown.
Source: Read the original article
