ABOUT 39,798 SAFEPAL BUYERS JUST HAD ORDER DATA LEAKED ๐จ๐ฆ๐
SafePal said a flaw in its order-tracking plug-in (a small add-on on the order site that shows package status) let outsiders open another customer's order file.
Orders placed between 2 March 2025 and 11 April 2026. ๐๐งพ
What leaked ๐
๐ถ Full name
๐ท Email
๐ธ Phone number
๐น Home shipping address
๐ What they bought
SafePal says seed phrases (secret recovery words), private keys, wallet passwords, bank cards, and government IDs were not in this leak. ๐ก๏ธ
On 13 August 2026, Trezor said about 13,689 recent buyers were hit after a shipping partner got opened. This SafePal list is almost 3 times larger, and it covers about 13 months of orders, not a short recent window. ๐๐ฆ
Why that size still hurts ๐ ๐
๐ฅ Fake support can call or email with the real name, real order, and real home address
๐ง Home address plus โthis person bought a hardware walletโ is a physical-risk list, not only spam
SafePalโs own FAQ now says the first matching report came in early May 2026. The company treated it as one case, then only later told the public. Buyers had already posted in May that fake SafePal staff called and recited the exact home address and order. โ ๏ธ๐
A cleanup job that should have deleted old order files also sat broken from September 2025 to April 2026. That is why 2025 orders were still sitting in the system.
SafePal now says it will keep this kind of order data for only 90 days, and that it took down over 30 fake phishing sites. Affected buyers were emailed. There is also an official check page that uses order ID and shipping country.
have you ever bought safepal wallet? ๐
#Crypto #SafePal #HardwareWallet #Trezor #Security
SafePal said a flaw in its order-tracking plug-in (a small add-on on the order site that shows package status) let outsiders open another customer's order file.
Orders placed between 2 March 2025 and 11 April 2026. ๐๐งพ
What leaked ๐
๐ถ Full name
๐ท Email
๐ธ Phone number
๐น Home shipping address
๐ What they bought
SafePal says seed phrases (secret recovery words), private keys, wallet passwords, bank cards, and government IDs were not in this leak. ๐ก๏ธ
On 13 August 2026, Trezor said about 13,689 recent buyers were hit after a shipping partner got opened. This SafePal list is almost 3 times larger, and it covers about 13 months of orders, not a short recent window. ๐๐ฆ
Why that size still hurts ๐ ๐
๐ฅ Fake support can call or email with the real name, real order, and real home address
๐ง Home address plus โthis person bought a hardware walletโ is a physical-risk list, not only spam
SafePalโs own FAQ now says the first matching report came in early May 2026. The company treated it as one case, then only later told the public. Buyers had already posted in May that fake SafePal staff called and recited the exact home address and order. โ ๏ธ๐
A cleanup job that should have deleted old order files also sat broken from September 2025 to April 2026. That is why 2025 orders were still sitting in the system.
SafePal now says it will keep this kind of order data for only 90 days, and that it took down over 30 fake phishing sites. Affected buyers were emailed. There is also an official check page that uses order ID and shipping country.
have you ever bought safepal wallet? ๐
#Crypto #SafePal #HardwareWallet #Trezor #Security