[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ftVYoGEmZLRSNomjD2hnXn_07QZWVtjjtTC2AQAngIpU":3},{"article":4,"iocs":41,"watch_terms":46,"solutions":47,"lesson":134},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"d23bbebd-a455-44ea-b853-f8f00119c0e7","SafePal data breach impacts 39,798 customers, stolen info for sale","safepal-data-breach-impacts-39-798-customers-stolen-info-for-sale-847da7","Cryptocurrency hardware wallet provider SafePal is warning of a data breach affecting about 39,798 customers after a flaw was exploited to steal customer order information, and a threat actor is now claiming to be selling the stolen data. [...]","Cryptocurrency hardware wallet provider SafePal has disclosed a data breach affecting 39,798 customers who placed orders between March 2025 and April 2026. The breach exposed names, email addresses, shipping addresses, phone numbers, and purchase information, but not wallet keys or financial data. A threat actor is now reportedly selling this stolen customer data on a cybercrime forum, potentially for use in phishing and social engineering attacks.","SafePal data breach impacts 39,798 customers; stolen order info for sale.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fsafepal-data-breach-impacts-39-798-customers-stolen-info-for-sale\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F08\u002F16\u002Fsafepal-header.jpg","2026-08-16T23:47:06+00:00","2026-08-17T00:00:13.047005+00:00",8,[17,20],{"name":18,"type":19},"SafePal X1","product",{"name":21,"type":22},"SafePal","vendor","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":23,"icon":25,"name":26,"slug":27},null,"Breaches","breaches",[29,31,36],{"category":30},{"id":23,"icon":25,"name":26,"slug":27},{"category":32},{"id":33,"icon":25,"name":34,"slug":35},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":37},{"id":38,"icon":25,"name":39,"slug":40},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[42],{"type":43,"value":44,"context":45},"malware","SafePal X1 hardware wallet phishing email","Phishing email claiming a security vulnerability in SafePal X1 hardware wallet and requiring a firmware update.",[21,18],{"controls":48,"vendors":133},[49,78,104],{"slug":50,"name":51,"problem":52,"products":53},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[54,62,70],{"vendor_slug":55,"vendor_name":56,"vendor_logo":57,"product_slug":58,"product_name":59,"url":60,"description":61},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":66,"product_name":67,"url":68,"description":69},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":71,"vendor_name":72,"vendor_logo":73,"product_slug":74,"product_name":75,"url":76,"description":77},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"slug":79,"name":80,"problem":81,"products":82},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",[83,89,96],{"vendor_slug":84,"vendor_name":85,"vendor_logo":86,"product_slug":84,"product_name":85,"url":87,"description":88},"hoxhunt","Hoxhunt","\u002Fvendor-logos\u002Fhoxhunt.png","https:\u002F\u002Fhoxhunt.com\u002F","Adaptive phishing simulations and micro-training, with a focus on reporting.",{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":90,"product_name":93,"url":94,"description":95},"sosafe","SoSafe","\u002Fvendor-logos\u002Fsosafe.png","SoSafe Awareness Platform","https:\u002F\u002Fsosafe-awareness.com\u002F","Behaviour-based awareness training and phishing simulation in many languages.",{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":100,"product_name":101,"url":102,"description":103},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-sat","Huntress Managed Security Awareness Training","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fsecurity-awareness-training","Security awareness training and phishing simulation, managed for you.",{"slug":105,"name":106,"problem":107,"products":108},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.",[109,117,125],{"vendor_slug":110,"vendor_name":111,"vendor_logo":112,"product_slug":113,"product_name":114,"url":115,"description":116},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","incident-response","CrowdStrike Incident Response","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fservices\u002Fincident-response\u002F","Incident response services, available on retainer.",{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":121,"product_name":122,"url":123,"description":124},"google","Google","\u002Fvendor-logos\u002Fgoogle.png","mandiant-incident-response","Mandiant Incident Response","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fconsulting\u002Fmandiant-incident-response-services","Incident response services from Mandiant, available on retainer.",{"vendor_slug":126,"vendor_name":127,"vendor_logo":128,"product_slug":129,"product_name":130,"url":131,"description":132},"truesec","Truesec","\u002Fvendor-logos\u002Ftruesec.png","truesec-incident-response","Truesec Incident Response","https:\u002F\u002Fwww.truesec.com\u002Fservice\u002Fincident-response","Incident response team with a retainer option.",[],{"slug":135,"title":136,"body":137,"framework_refs":138,"framework_notes":151},"safepal-breach-exposes-39798-customers-pii-now-for-sale-on-dark-web","SafePal Breach Exposes 39,798 Customers' PII, Now for Sale on Dark Web","SafePal suffered a data breach exposing personally identifiable information (PII) for nearly 40,000 customers, including names, shipping addresses, phone numbers, and purchase details. Although wallet keys and financial data were not compromised, the exposed PII is highly valuable to threat actors who can weaponize it for targeted phishing, SIM-swapping, and social engineering attacks — especially dangerous in the cryptocurrency space where users are high-value targets. The fact that stolen data is already being sold on a cybercrime forum indicates the breach was not detected and contained quickly enough to prevent exfiltration. This incident underscores that any company handling customer data must treat PII with the same rigor as financial credentials, implementing strong data minimization, encryption, and monitoring practices.",[139,140,141,142,143,144,145,146,147,148,149,150],"CIS Control 3 – Data Protection","CIS Control 14 – Security Awareness and Skills Training","NIST SP 800-53 SC-28 – Protection of Information at Rest","NIST SP 800-53 AC-3 – Access Enforcement","NIST SP 800-53 AU-6 – Audit Record Review, Analysis, and Reporting","NIST Privacy Framework PR.DS-P – Data Security for Privacy","GDPR Article 5(1)(c) – Data Minimisation","GDPR Article 5(1)(f) – Integrity and Confidentiality","GDPR Article 32 – Security of Processing","GDPR Article 33 – Notification of a Personal Data Breach","NIST SP 800-122 – Guide to Protecting the Confidentiality of PII","ISO\u002FIEC 27001 Annex A.8.2 – Information Classification",{}]