#What Happened With SafePal’s Customer Data?
SafePal, a hardware wallet manufacturer associated with Binance Labs, recently faced a troubling situation involving the exposure of customer data affecting around 40,000 users. This security breach became evident through reports from SafePal S1 users on Reddit in May 2026, who disclosed that they were contacted by scammers with personal details such as full names, shipping addresses, device models, order quantities, delivery locations, and payment methods.
#What Information Was Compromised?
Fortunately, the investigation conducted between May and August 2026 established that no seed phrases or private keys were compromised. The SafePal S1 is designed to be a fully air-gapped device, meaning it doesn’t rely on Bluetooth, WiFi, NFC, or USB connectivity. This aspect of security remained intact.
SafePal stated that it does not keep customer payment information or personal data permanently, adhering to a 12-month data deletion policy. Additionally, the wallet's usage does not necessitate KYC verification or account registration.
However, as of now, SafePal has not provided a formal disclosure regarding the number of impacted users. The estimate of approximately 40,000 affected customers seems to derive from external sources rather than company announcements.
#How Does This Compare to Previous Incidents in the Industry?
This scenario isn't entirely new to the cryptocurrency landscape. In 2020, Ledger, a key player in hardware wallets, suffered a breach that compromised the personal information of over a million customers, which resulted in phishing emails and other risks for users. SafePal has, up to this point, maintained a strong security record since its inception in 2018, free from documented wallet hacks, benefitting from its collaboration with Binance Labs.
#What Should Affected Users Do?
For the 40,000 customers whose data could be at risk, immediate concerns should center around potential phishing attempts and social engineering scams. The scammers, armed with information about the SafePal S1 ownership, addresses, and payment details, can craft convincing attacks.
To safeguard against these risks, it is crucial to remain cautious with any unsolicited contacts that purport to be from SafePal or its affiliates. Avoid clicking on links from unexpected emails or messages, and treat any requests for wallet information or seed phrases as potential scams, no matter how legitimate the source may seem. Taking these precautions can significantly reduce the risks associated with this breach.