SafePal said an order-system flaw exposed the personal data of 39,798 customers. No cryptocurrency funds, seed phrases, private keys, passwords, payment card numbers, or government identification documents were compromised.