ABOUT 39,798 SAFEPAL BUYERS JUST HAD ORDER DATA LEAKED 🚨📦👀
SafePal said a flaw in its order-tracking plug-in (a small add-on on the order site that shows package status) let outsiders open another customer's order file.
Orders placed between 2 March 2025 and 11 April 2026. 🔓🧾
What leaked 🔓
🔶 Full name
🔷 Email
🔸 Phone number
🔹 Home shipping address
💠 What they bought
SafePal says seed phrases (secret recovery words), private keys, wallet passwords, bank cards, and government IDs were not in this leak. 🛡️
On 13 August 2026, Trezor said about 13,689 recent buyers were hit after a shipping partner got opened. This SafePal list is almost 3 times larger, and it covers about 13 months of orders, not a short recent window. 📉📦
Why that size still hurts 🏠📞
🟥 Fake support can call or email with the real name, real order, and real home address
🟧 Home address plus “this person bought a hardware wallet” is a physical-risk list, not only spam
SafePal’s own FAQ now says the first matching report came in early May 2026. The company treated it as one case, then only later told the public. Buyers had already posted in May that fake SafePal staff called and recited the exact home address and order. ⚠️📅
A cleanup job that should have deleted old order files also sat broken from September 2025 to April 2026. That is why 2025 orders were still sitting in the system.
SafePal now says it will keep this kind of order data for only 90 days, and that it took down over 30 fake phishing sites. Affected buyers were emailed. There is also an official check page that uses order ID and shipping country.
have you ever bought safepal wallet? 👇
#Crypto #SafePal #HardwareWallet #Trezor #Security
SafePal said a flaw in its order-tracking plug-in (a small add-on on the order site that shows package status) let outsiders open another customer's order file.
Orders placed between 2 March 2025 and 11 April 2026. 🔓🧾
What leaked 🔓
🔶 Full name
🔸 Phone number
🔹 Home shipping address
💠 What they bought
SafePal says seed phrases (secret recovery words), private keys, wallet passwords, bank cards, and government IDs were not in this leak. 🛡️
On 13 August 2026, Trezor said about 13,689 recent buyers were hit after a shipping partner got opened. This SafePal list is almost 3 times larger, and it covers about 13 months of orders, not a short recent window. 📉📦
Why that size still hurts 🏠📞
🟥 Fake support can call or email with the real name, real order, and real home address
🟧 Home address plus “this person bought a hardware wallet” is a physical-risk list, not only spam
SafePal’s own FAQ now says the first matching report came in early May 2026. The company treated it as one case, then only later told the public. Buyers had already posted in May that fake SafePal staff called and recited the exact home address and order. ⚠️📅
A cleanup job that should have deleted old order files also sat broken from September 2025 to April 2026. That is why 2025 orders were still sitting in the system.
SafePal now says it will keep this kind of order data for only 90 days, and that it took down over 30 fake phishing sites. Affected buyers were emailed. There is also an official check page that uses order ID and shipping country.
have you ever bought safepal wallet? 👇
#Crypto #SafePal #HardwareWallet #Trezor #Security