SafePal’s latest disclosure hits a less obvious layer of crypto infrastructure: the commerce systems around wallet sales rather than the custody layer itself. The wallet provider confirmed that order information tied to nearly 40,000 customers was exposed, according to the original report.
SafePal has not disclosed whether the records were held on its own systems or by a third-party fulfillment vendor. That detail will matter to customers because a logistics partner breach can be just as dangerous as a compromise of the wallet maker’s internal database.
What did not move is just as important. SafePal said private keys, seed phrases, and crypto assets were not compromised. That distinction defines the risk here: this is not a failure of the signing device or the wallet’s cryptographic design, but of the operational layer that handles purchases and customer data.
Order records can still create a real exposure. Names, shipping addresses, purchase history, and contact details are the kind of data that feeds targeted phishing, fake delivery notices, and social engineering attempts. An attacker does not need a seed phrase if they can convince a customer to enter it into a convincing lookalike interface built from leaked order context.
