SafePal Data Leak Exposes Address Info for 40,000 Customers
A bug in SafePal's order-tracking software exposed customer names, phone numbers, and physical addresses.
Advertising disclosure: we may earn a commission when you join an operator via links on this page, at no cost to you. This never dictates our ratings. How we make money
Key takeaways
- A third-party order-tracking plug-in caused a data breach at SafePal.
- Names, phone numbers, and physical addresses of nearly 40,000 customers were exposed.
- The leak raises immediate fears of targeted phishing and physical attacks against users.
An unpatched vulnerability in an order-tracking plug-in tied to wallet provider SafePal just exposed personal information belonging to nearly 40,000 customers.
The incident leaked names, phone numbers, and physical shipping addresses. Crucially, SafePal's core wallet software and private keys weren't touched. But tying real-world addresses to crypto ownership creates immediate, tangible risks for anyone on that list.
History shows hardware wallet data leaks carry ugly consequences. Bad actors routinely parse exposed shipping logs to stage targeted phishing scams, coordinate SIM swaps, or worse, execute physical home invasions to force funds out of victims.
Why it matters
Your front door is usually the weakest link in your threat model. Cold storage isolates your keys from the web, but exposed logistics data draws a direct line to your living room. Buying hardware wallets or crypto gear straight to your house is a bad habit. Use a PO box and a burner phone number. That isn't paranoia anymore—it's basic operational security.
Source: Decrypt
Top Crypto Casinos Right Now
🇦🇺 Showing sites that accept players from Australia Change country
Advertising disclosure: we may earn a commission when you join an operator via links on this page, at no cost to you. This never dictates our ratings. How we make money
More info Less info
Why we chose it: A US-oriented casino that turns away only New Jersey. The cashier takes crypto, but the site publishes fewer specifics than any operator we list.
- KYC
- Required
Restricted countries: New Jersey (US).
More info Less info
Why we chose it: One of the widest crypto line-ups of any book we list - seven coins with fast payouts - aimed squarely at Asia and Latin America rather than the US or Western Europe.
- Licence
- Curacao
Restricted countries: United States, United Kingdom, France, Spain, Italy, Germany, Austria, Sweden and 20 more.
More info Less info
Why we chose it: Built for American bettors, priced accordingly. Biggest welcome bonus of the five, attached to the heaviest rollover of the five.
- Online since
- 1994
- Licence
- Curaçao
- Payout time
- 24–48 hours (crypto)
- Wagering
- 18x sportsbook / 30x casino
- KYC
- Required
Restricted countries: Belgium, Costa Rica, Croatia, Curaçao, Aruba, Sint Maarten, Caribbean Netherlands, France and 11 more.
Daniel Okoro
Daniel tracks crypto regulation and policy across the US, EU and Asia, with a decade in financial journalism.
