A recent data breach at SafePal, a cryptocurrency hardware wallet provider, has compromised the personal information of 39,798 customers, which is now being sold by a threat actor. The breach occurred due to the exploitation of a flaw, allowing the attacker to steal customer order information. The stolen data includes sensitive details that could be used for identity theft, phishing, or other malicious activities. SafePal has warned its affected customers, advising them to take precautions to protect themselves from potential attacks. The breach highlights the importance of robust security measures for cryptocurrency-related services, as the stolen information can be used to target vulnerable individuals. The sale of the stolen data on the dark web poses a significant risk to the affected customers, so practitioners should be vigilant in monitoring their accounts and personal information for any suspicious activity1.