SafePal breach leaks 40k users' data via order tracking flaw

SAFEPAL recently confirmed a data breach affecting approximately 39,798 customers due to an authorization flaw in an order-tracking plug-in. Exposed data includes names, email addresses, shipping addresses, phone numbers, and purchase details from orders placed between March 2, 2025, and April 11, 2026. No sensitive wallet credentials or financial information were compromised. SafePal has since fixed the flaw, notified affected customers, and is actively monitoring for potential phishing threats stemming from the leaked data.