SafePal Data Leak Exposes Address Info for 40,000 Customers
A bug in SafePal's order-tracking software exposed customer names, phone numbers, and physical addresses.
Advertising disclosure: we may earn a commission when you join an operator via links on this page, at no cost to you. This never dictates our ratings. How we make money
Key takeaways
- A third-party order-tracking plug-in caused a data breach at SafePal.
- Names, phone numbers, and physical addresses of nearly 40,000 customers were exposed.
- The leak raises immediate fears of targeted phishing and physical attacks against users.
An unpatched vulnerability in an order-tracking plug-in tied to wallet provider SafePal just exposed personal information belonging to nearly 40,000 customers.
The incident leaked names, phone numbers, and physical shipping addresses. Crucially, SafePal's core wallet software and private keys weren't touched. But tying real-world addresses to crypto ownership creates immediate, tangible risks for anyone on that list.
History shows hardware wallet data leaks carry ugly consequences. Bad actors routinely parse exposed shipping logs to stage targeted phishing scams, coordinate SIM swaps, or worse, execute physical home invasions to force funds out of victims.
Why it matters
Your front door is usually the weakest link in your threat model. Cold storage isolates your keys from the web, but exposed logistics data draws a direct line to your living room. Buying hardware wallets or crypto gear straight to your house is a bad habit. Use a PO box and a burner phone number. That isn't paranoia anymore—it's basic operational security.
Source: Decrypt
Top Crypto Casinos Right Now
🇬🇧 Showing sites that accept players from United Kingdom Change country
Advertising disclosure: we may earn a commission when you join an operator via links on this page, at no cost to you. This never dictates our ratings. How we make money
More info Less info
Why we chose it: A US-oriented casino that turns away only New Jersey. The cashier takes crypto, but the site publishes fewer specifics than any operator we list.
- KYC
- Required
Restricted countries: New Jersey (US).
More info Less info
Why we chose it: The LatAm door of the BetNow platform: Spanish-first, a 200% welcome at 20x rollover, and a weekly 2% rebate. Crypto rails unconfirmed — check before depositing.
- KYC
- Required
Restricted countries: Australia, Costa Rica, Central African Republic, Congo - Brazzaville, Eritrea, France, Guinea-Bissau, Iraq and 15 more.
Daniel Okoro
Daniel tracks crypto regulation and policy across the US, EU and Asia, with a decade in financial journalism.
