SafePal Addresses Security Breach with Anti-Fraud Partner and Independent Audit

SafePal has disclosed a security vulnerability in its order tracking plugin that allowed unauthorized access to customer data. The company is taking measures including partnering with anti-fraud organizations to remove phishing sites and monitoring for data leaks, while also commissioning an independent security audit.

Overview of SafePal Security Incident

Safepal has disclosed a security vulnerability in its order tracking plugin that resulted in unauthorized access to customer data. The vulnerability stemmed from inadequate permission controls within the plugin.

Scope of the Incident

Affected Data: Order management and logistics-related information
Not Affected: Hardware wallets, private keys, recovery phrases, and cryptocurrency assets remain secure

Response Measures

Safepal is implementing the following actions:

1. Removal of Phishing Sites and Fake Accounts

Selecting one anti-fraud partner from multiple candidates
Rapid removal of fraudulent websites and impersonation accounts

2. Data Breach Monitoring

Monitoring dark web forums and black markets for evidence of data sales or publication
Customers will be notified immediately if their data is discovered being sold or shared

3. Independent Third-Party Security Audit

Engaging one of three independent security firms
Comprehensive audit of the entire order management system

4. Data Retention Period Review

Evaluating measures to reduce data storage duration within order and logistics processes

Recommended Actions for Users

Verify Your Account

Follow SafePal's guidance if you receive a notification of potential exposure
Do not respond to suspicious emails or messages claiming to be from SafePal

Watch for Fraud Warning Signs

Unexpected emails containing transaction details
Unusual charges on your credit card or payment statements
Suspicious login attempts to your accounts

Strengthen Your Security

Use strong, unique passwords for all accounts
Enable two-factor authentication whenever available
Minimize sharing of personal information online
Monitor your financial accounts regularly

Reporting and Support

If you suspect fraud or identity theft:

Contact SafePal official support
Report to your country's consumer protection authority
File a report with local law enforcement or cybercrime divisions
Report to international fraud reporting agencies as applicable