A data breach at hardware wallet provider SafePal has exposed the personal information of nearly 40,000 customers, according to Decrypt. The vulnerability came from a third-party order-tracking plugin, not the wallet hardware itself—but the damage is significant. Names, home addresses, and phone numbers were compromised, giving bad actors a map to people who are known to own Bitcoin.
That last point matters most. Unlike a leaked password or credit card number, a home address tied to Bitcoin ownership raises the risk of physical attack. Criminals have increasingly targeted known holders with robberies and home invasions. When personal data leaks from a wallet company, the exposure is not abstract.
What SafePal Users Should Do Now
- Treat your address as compromised. If your shipping address is linked to your SafePal order, assume it is in circulation.
- Enable two-factor authentication on any accounts connected to your wallet or exchange activity.
- Be alert to phishing. Attackers with real names and addresses often craft convincing targeted messages. Do not click links in emails or texts referencing your wallet.
- Consider a PO box or package forwarding service for any future hardware wallet purchases.
SafePal has not yet disclosed the full scope of the breach or whether law enforcement has been notified. The company should provide clear, direct communication to affected customers—and fast.
Meanwhile, Strategy Pauses Bitcoin Buying
Separate from the security news, The Block and CoinDesk both reported that Strategy—the firm led by Michael Saylor—raised $334 million last week by selling shares of its own stock but made no new Bitcoin purchases. The proceeds went toward dividends, a share buyback program, and boosting the company's US dollar reserve, which now stands at $4.8 billion. Strategy's existing Bitcoin holdings, unchanged at roughly 4% of the total 21 million coin supply cap, are worth approximately $53.4 billion at current prices.
The pause does not signal a strategy shift. Saylor has made clear the firm treats Bitcoin as a long-term treasury asset, and using equity issuance to fund operational needs—rather than selling Bitcoin—is consistent with that approach. Still, a week with no new purchases is notable given how consistently the firm has accumulated.
Price Context
Bitcoin is trading near $63,431 as of Monday morning. CoinDesk noted that a recent ETF outflow week totaling $390 million has kept buying momentum subdued, while a lapsing US-Iran ceasefire has reintroduced oil-price uncertainty into broader markets. The price remains under its 200-week moving average, a level that, according to Cointelegraph, has historically marked extended bear-market periods—though context and timeframes vary considerably.
The SafePal breach is a useful reminder that Bitcoin security is not only about software and keys. Physical privacy matters too, and donors who hold Bitcoin for charitable giving should keep their personal information as guarded as their seed phrases.