SafePal Data Breach Exposes 40k Users in Latest Crypto Security Incident

Summary

• SafePal disclosed a data breach on August 16 2026 that exposed order details of 39,798 customers.
• The SafePal data breach revealed names, emails and shipping addresses but left all crypto funds and wallet credentials secure.
• A separate third-party incident at Trezor shipping partner ShipMonk exposed data for nearly 14,000 users in the same period.

SafePal announced a data breach on August 16 2026. Unauthorized access exposed personal order details for 39,798 customers. Orders placed between March 2 2025 and April 11 2026 leaked names, emails, and shipping addresses.

Reuters and InfoSecurity Magazine covered the reports.

No crypto holdings, seed phrases, or private keys turned up in the breach. SafePal's incident created no direct risk of lost funds.

Context

Crypto wallet providers face rising regulatory and public scrutiny as personal data incidents climb. Order records often hold real-world details that phishers or attackers can exploit. On-chain assets stayed safe, yet the exposure still matters.

This disclosure comes amid similar events at hardware wallet firms. Supply-chain partners now rank among the weakest links.

Details

SafePal told CoinMarketCap the breach stayed limited to order data. Wallet security held firm. No customer funds moved.

Trezor faced a parallel issue. Its partner ShipMonk suffered unauthorized access that exposed shipping data for nearly 14,000 customers. Both cases prove customer data outside core systems still creates privacy risks.

The limited scope cuts immediate financial exposure. Personal details alone never grant control over private keys or seed phrases on user devices.

"No crypto funds, seed phrases or private keys were compromised."

, SafePal via Reuters (https://www.reuters.com/legal/litigation/crypto-wallet-provider-safepal-discloses-data-breach-affecting-nearly-40000-2026-08-16/)

Users who ordered during that window should watch for phishing that uses the leaked names and addresses. SafePal urged customers to check any unexpected messages that claim to come from the company.

Outlook

Affected customers can expect further guidance from SafePal on monitoring and credit protection. The incident shows wallet providers must lock down every third-party data touchpoint.