SafePal reportedly exposed data of nearly 40,000 customers

SafePal, the hardware wallet maker backed by Binance Labs, is dealing with an uncomfortable revelation: customer order data for roughly 40,000 users was exposed, leaving personal information in the hands of scammers. The incident first surfaced on Reddit in May 2026, when SafePal S1 device owners began reporting something unsettling. Scammers were contacting them with details they had no business knowing: full names, shipping addresses, device models, quantities ordered, delivery locations, and the payment methods used at checkout. What got exposed and what didn’t The good news, such as it is, sits at the wallet level. Investigations conducted through mid-August 2026 found no evidence that seed phrases or private keys were compromised. The SafePal S1 is marketed as a fully air-gapped device, meaning it operates without Bluetooth, WiFi, NFC, or USB connectivity. On that front, the wall held. SafePal responded to the initial reports by stating that it does not retain payment information or personal data indefinitely, with purchase records deleted on a 12-month cycle. The company also noted it does not require KYC verification or account registration to use its services. As of the tim...