SafePal Discloses Security Vulnerability in Tracking Plugin: Unauthorized Access to Some Customer Order Information, Affecting Approximately 39,798 Users.

SafePal has officially announced a security vulnerability in its order tracking plugin that enabled unauthorized access to some customers’ order information. Approximately 39,798 users are affected, all of whom placed orders between March 2, 2025 and April 11, 2026. Leaked data includes names, email addresses, shipping addresses, phone numbers and purchase details. Notably, users’ wallets, mnemonics and private keys remain fully secure—this incident does not involve mnemonics, private keys, wallet passwords, bank account information, payment card numbers or government-issued identification. The issue has been resolved, and additional security measures have been implemented. All affected customers have been individually notified via email, and SafePal has launched an official verification page where users can check their impact status using their order number and shipping country. SafePal apologized for the incident, reminding users never to disclose mnemonics, private keys or passwords, stay vigilant against phishing and impersonation attempts, and will release further updates on its official blog.