SafePal Confirms Unauthorized Access to Approximately 40,000 Customer Order Records

SafePal has confirmed an incident of unauthorized access to customer order information. Approximately 39,798 customers have been affected. This incident stemmed from a flaw in the permission validation of a plugin linked to the order inquiry function, which allowed access to other customers' order information under certain conditions. The leaked information includes the names, email addresses, shipping addresses, phone numbers, and purchase histories of customers who placed orders between March 2, 2025, and April 11, 2026. SafePal emphasized that seed phrases, private keys, and wallet passwords are unrelated to this incident and stated that it does not collect or store such information. The leaked order information could be exploited for phishing and impersonation attempts, and customers are advised to be cautious of suspicious messages or websites. Affected customers received individual notifications via official email on the 16th, and a dedicated webpage has been set up to verify any potential damage. SafePal is currently working on fixing the flaw and conducting checks through external security firms, while also reducing the retention period for personal data to 90 days. Additionally, over 30 fraudulent websites and phishing links related to the incident have been blocked, and monitoring for new fraudulent activities is ongoing.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.