SafePal data breach impacts 39,798 customers, stolen info for sale

SafePal suffered a data breach exposing personally identifiable information (PII) for nearly 40,000 customers, including names, shipping addresses, phone numbers, and purchase details. Although wallet keys and financial data were not compromised, the exposed PII is highly valuable to threat actors who can weaponize it for targeted phishing, SIM-swapping, and social engineering attacks — especially dangerous in the cryptocurrency space where users are high-value targets. The fact that stolen data is already being sold on a cybercrime forum indicates the breach was not detected and contained quickly enough to prevent exfiltration. This incident underscores that any company handling customer data must treat PII with the same rigor as financial credentials, implementing strong data minimization, encryption, and monitoring practices.