SafePal disclosed a data breach affecting close to 40,000 users, with the exposed information tied to customer order records, according to Reuters reporting . For related coverage, see UBS Boosted Bitcoin ETF Call Options 24x While Cutting Downside Bets .
SafePal, a Bitcoin and multi-chain crypto wallet provider, has disclosed a data breach reportedly affecting nearly 40,000 users, exposing customer order information and raising concerns that extend beyond digital theft into physical security for self-custody holders.
SafePal disclosed a data breach affecting close to 40,000 users, with the exposed information tied to customer order records, according to Reuters reporting. For related coverage, see UBS Boosted Bitcoin ETF Call Options 24x While Cutting Downside Bets.
The company outlined the incident in its own security update, which frames the exposure around order-related data rather than wallet keys or seed phrases. For related coverage, see Spot Bitcoin ETFs Saw $390M in Net Outflows Last Week.
Order information for a hardware wallet vendor typically carries a different weight than a leak from an ordinary platform, because it can link a real-world identity and shipping details to ownership of a self-custody device. That distinction is what has moved the conversation toward physical safety, as covered in related reporting on how the crypto wallet data breach exposed nearly 40,000 customers. For related coverage, see Bitcoin Treasury Company Sells 600 BTC to Cut Debt, Faces $60M Due in December.
Online fraud risk and physical-world threat exposure are not the same thing. A leaked password can be reset; a leaked home address tied to a hardware wallet purchase cannot be un-leaked.
Order data can include a customer’s name, shipping address, phone number, and email. Combined, those fields can be misused for targeting, coercion, or surveillance of someone presumed to hold crypto assets offline.
Hardware and self-custody wallet ownership makes such records more sensitive precisely because the buyer signals that they may control assets directly, without an exchange intermediary. The stakes of that model were underscored in coverage of a $116 million self-custody wake-up call, where operational discipline proved central.
Affected users should monitor SafePal’s official disclosures directly for scope updates and remediation guidance, including the company’s security update page.
Near-term precautions users may consider include heightened vigilance against phishing and impersonation attempts that reference recent orders, and reviewing the privacy of any address or contact details previously submitted to the vendor.
The incident also carries a broader implication for wallet vendors handling customer data: order and fulfillment records are themselves a security surface, and their exposure can undermine the operational privacy that self-custody depends on.
Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.
Quick access to the site tools and map-driven utility pages.
Follow the core desks readers use most across Bitcoin, altcoins, mining, events, and sponsored coverage.
© 2026 BitcoinInfoNews.com. All rights reserved.
Independent Bitcoin and crypto coverage with public trust, policy, and newsroom pages available sitewide.
