SafePal says a flaw in its order-tracking system exposed customer order details for about 39,798 customers and that a threat actor is now claiming to sell the stolen data. The company says wallet seed phrases, private keys, and funds were not compromised, but it warns the exposed information could be used for phishing and social engineering attacks. #SafePal #DarkWebInformer
Keypoints
- SafePal disclosed a breach affecting about 39,798 customers.
- The exposed data included names, email addresses, shipping addresses, phone numbers, and purchase details.
- SafePal said seed phrases, private keys, passwords, and payment data were not exposed.
- A threat actor is allegedly selling the stolen data on a cybercrime forum.
- SafePal fixed the flaw, alerted customers, and warned about phishing and phone scams.