SafePal reports data leak affecting nearly 40,000 users

On August 16, SafePal announced a security incident involving the unauthorized disclosure of personal information for nearly 40,000 users. The breach resulted from an authorization flaw in the company's order tracking plugin, leading to the exposure of names, contact details, delivery addresses, and order information. Importantly, private keys and seed phrases remained unaffected, and there has been no evidence of direct compromise of crypto assets. SafePal has advised affected users to remain vigilant against phishing attempts and to avoid sharing seed phrases. This incident highlights the ongoing risks associated with data security in the crypto ecosystem, especially concerning personal address information that could be exploited for targeted social engineering or phishing attacks.