SafePal Data Breach Exposes Order Details of 40,000 Crypto Wallet Users

Non-custodial cryptocurrency wallet provider SafePal, which is backed by Binance, has confirmed a security incident involving unauthorized access to customer order information. The company said the breach affected roughly 40,000 users and occurred during a specific time frame, though it has not detailed exactly how the intrusion happened.

While SafePal is a non-custodial wallet—meaning the company does not hold users' funds directly—exposed order information can still be valuable to attackers for phishing, scams, or identity-related fraud. Incidents like this are a reminder that even service providers who don't hold your money can still hold sensitive personal and transactional data that needs protecting.

For small businesses that use cryptocurrency services, or that hold customer order and transaction data of their own, this incident highlights the importance of understanding what data your vendors store and how they protect it. Breaches at third-party providers can indirectly expose your business or customers to follow-on scams, even if your own systems were never touched.