Safepal data leaks affect nearly 40,000 customers and expose hardware wallet security concerns

Safepal disclosed a data leak that affected 39,798 clients. The key to the incident was the weaknesses in the authorization of an order tracking plugin, which revealed the name, e-mail, telephone number, mailing address and purchase information of the client. According to Safepal, no wallet access or client funds were found to have been affected, and assistive words, private keys and passwords were not disclosed. The incident highlighted another problem faced by hardware wallet providers: While the equipment can protect the encryption key, commercial systems used for sale may reveal the identity and location of the user. Safepal has repaired the problem and has taken additional security measures。