According to CoinMeta, Safepal disclosed a data breach that affected 39,798 customers. The key to this incident lies in an authorization flaw in an order tracking plugin, which exposed customers' names, email addresses, phone numbers, mailing addresses, and purchase information. Safepal stated that no wallet access or customer funds were compromised, and that mnemonics, private keys, and passwords were not leaked. This incident highlights another issue faced by hardware wallet providers: although the devices can protect encryption keys, the commercial systems used for sales may still expose users' identities and locations. Safepal has fixed this issue and taken additional security measures.