SafePal said personal information from about 39,798 customers was exposed through a code flaw in an order-tracking plugin. The affected customers placed orders between March 2, 2025 and April 11, 2026. SafePal said wallet systems, seed phrases, and private keys remain securely protected.