PrivacySignal
Breach

SafePal latest crypto hardware wallet maker affected by breach, with nearly 40,000 impacted

The Record · · International · Data Breaches

SafePal, a company that makes cryptocurrency hardware wallets, confirmed a data breach affecting nearly 40,000 customers. Personal information was stolen in the incident, which SafePal disclosed on Sunday.

Why this matters: Hardware wallets exist specifically because people want to keep their crypto safer. Buying one means trusting a company with your personal details. If that company gets breached, attackers now know who holds cryptocurrency and how to reach them. That is a short list of people worth targeting for phishing, SIM swaps, or physical threats. SafePal is not the first hardware wallet company hit this way. At this point, any company that sells security products to crypto holders needs to treat its customer database like a very sensitive target — because it is.

Who should care: Cybersecurity · Privacy officers · Administrators

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

The Attacker Did Not Need to Sleep

Spain received its first reported personal-data breach carried out by an AI agent. The techniques were familiar. The speed and autonomy were not.

· 4 min read Read →

Related stories

Breach
DataBreaches.net · · International

‘A treasure trove of information:’ Cybersecurity specialist says sensitive McMinnville records exposed online

A cybersecurity specialist discovered that sensitive city records from McMinnville, Oregon were exposed on the dark web and accessible in just a few clicks. The researcher described the breach as unusually easy to access, suggesting the exposed data was broad in scope.

Who should care: Cybersecurity · Privacy officers · Administrators

Breach
BleepingComputer · · International

Police dismantle KillSec ransomware gang allegedly led by 16-year-old

An international law enforcement operation called Operation KillSwitch dismantled the KillSec ransomware group, seizing its data leak site and servers and making three arrests. Investigators identified a 16-year-old as the group's alleged administrator.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance

#breach#enforcement#security Read original →
Breach
DataBreaches.net · · International

Suspected State Hackers Exploited Citrix NetScaler for Weeks. 50,000 Devices May Still Be Exposed.

Datawater reports: Two critical NetScaler zero-days, CVE-2026-88771 and CVE-2026-88772, were used against organizations worldwide before a patch existed. CISA’s deadline is today. Patching alone will not tell you whether you were already breached. Threat level: Critical What: Two unauthenticated remote-code-execution flaws in Citrix NetScaler ADC and NetScaler Gateway, both CVSS 9.5. Status: Exploited as zero-days.... Source

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →
Breach
HIPAA Journal · · US Federal

CPAP Medical Supplies and Services Agrees to Pay Up to $500K to Resolve Data Breach Lawsuit

CPAP Medical Supplies and Services, a Jacksonville-based provider of durable medical equipment for sleep apnea patients, has agreed to pay up to $500,000 to settle a lawsuit stemming from a data breach. The Florida company supplies equipment to patients managing a chronic medical condition.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals

#breach#enforcement#healthcare Read original →