# SafePal Confirms Data Breach, Warns of Phishing and 'Wrench Attacks' **SafePal**, a prominent crypto hardware wallet company, announced Sunday that a recent security incident led to the theft of sensitive information belonging to approximately 40,000 customers. This breach marks the third major security incident impacting hardware wallet manufacturers in recent weeks, following similar disclosures from **Trezor** and **Coinkite**. ## Details of the Breach The stolen data pertains to customers who placed orders between March 2, 2025, and April 11, 2026. Information compromised includes names, email addresses, shipping addresses, phone numbers, and purchase details. While **SafePal** did not elaborate on the specific exploit, they indicated a flaw in an order-tracking plugin that permitted unauthorized access to customer order information under certain conditions. The company asserts that the vulnerability has since been remediated. Crucially, **SafePal** reassured users that all wallets, seed phrases, and private keys remain secure and were not directly impacted by this breach. Affected customers have been notified via email, and a dedicated website has been established for users to check if their data was compromised. ## Heightened Risk of Phishing and Physical Threats **SafePal** has issued a strong warning to impacted individuals, advising them to be vigilant against sophisticated phishing attempts. These attacks could manifest as phone calls, emails, texts, fake refund offers, and fraudulent customer support messages, all designed to exploit the stolen data for further illicit gains. The exposure of personal details for cryptocurrency holders carries a particularly severe risk: 'wrench attacks.' This industry term refers to violent, in-person incidents where crypto owners are physically threatened and coerced into surrendering their digital assets. ## The Alarming Rise of 'Wrench Attacks' According to blockchain security audit firm **CertiK**, the first half of 2026 has seen a disturbing 33% year-over-year increase in wrench attacks. **CertiK**'s findings, based on publicly available and verified sources, documented 52 such attacks worldwide through June 2026, up from 39 during the same period in 2025. The financial losses from these attacks have escalated dramatically, reaching $124 million this year compared to $10.5 million in the first half of 2025. Recent high-profile examples underscore the gravity of this threat: * In April, a French mother and child were kidnapped in a cryptocurrency-related ransom scheme. * A 2025 home invasion in Minnesota involved an armed cryptocurrency kidnapping. * A 2024 case in Connecticut saw a **Lamborghini** owner carjacked as part of a crypto robbery scheme. Just last week, cryptocurrency investor **Harry Chun Tak Yeh** was found dead after a fall from his 30th-floor apartment in Paraguay, with police reporting an open door and a ransacked home, suggesting a potential link to his crypto holdings. This series of incidents highlights the critical importance for cryptocurrency users to not only secure their digital assets but also to protect their personal information from breaches that could expose them to both digital and physical threats.