SafePal Discloses Tracking Plugin Security Vulnerability: Partial Customer Order Information Unauthorized Accessed, Approximately 39,798 Users Affected

August 16th. SafePal's official announcement confirmed that its order tracking plugin had a security vulnerability, leading to unauthorized access to the order information of some customers. Approximately 39,798 customers were affected, all of whom placed orders between March 2, 2025, and April 11, 2026. The leaked information included names, email addresses, shipping addresses, phone numbers, and purchase details. Customers' wallets, mnemonic phrases, and private keys remained secure. This incident did not involve mnemonic phrases, private keys, wallet passwords, bank account information, payment card numbers, or government-issued identification documents. The issue has been fixed, and additional security measures have been implemented. All affected customers have been individually notified via email. SafePal has also released an official verification page where users can check if they are affected by using their order number and shipping country.

SafePal apologizes for the incident and reminds users not to disclose their mnemonic phrases, private keys, or passwords to anyone. Users are advised to remain vigilant against phishing and impersonation attempts. Further updates will be continuously posted on the official blog.