Critical

40,000 Impacted by SafePal Data Breach

SecurityWeek

August 17, 2026 at 9:37 AM

Actively Exploited

Overview

SafePal, a cryptocurrency wallet provider, has reported a data breach that has affected approximately 40,000 customers. Hackers took advantage of a vulnerability found in the order-tracking feature of a plugin, allowing them to access sensitive customer information. This breach raises significant concerns for users, as it may expose personal data and financial information. SafePal has not specified what particular data was compromised, but the incident highlights ongoing vulnerabilities within digital wallet services. Users are advised to monitor their accounts for any suspicious activity and take necessary precautions to protect their information.

Key Takeaways

Active Exploitation: This vulnerability is being actively exploited by attackers. Immediate action is recommended.
Affected Systems: SafePal cryptocurrency wallet customers
Action Required: Users should monitor accounts for suspicious activity; additional specific remediation steps not provided.
Timeline: Newly disclosed

Original Article Summary

Hackers exploited a vulnerability in the order-tracking function of a plugin to access SafePal customer information. The post 40,000 Impacted by SafePal Data Breach appeared first on SecurityWeek.

Impact

SafePal cryptocurrency wallet customers

Exploitation Status

This vulnerability is confirmed to be actively exploited by attackers in real-world attacks. Organizations should prioritize patching or implementing workarounds immediately.

Timeline

Newly disclosed

Remediation

Users should monitor accounts for suspicious activity; additional specific remediation steps not provided.

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to Vulnerability, Data Breach.

Read Original Article

Related Coverage

SafePal Data Breach Hits Tens of Thousands of Customers

Infosecurity Magazine

SafePal, a company known for its hardware wallets, has reported a data breach that has affected nearly 40,000 customers. The breach involved unauthorized access to customer data, raising concerns about the security of sensitive information. Users of SafePal's products may be at risk of identity theft or fraud as a result of this incident. The company has not yet disclosed the specific nature of the data that was compromised. This situation serves as a reminder for users to remain vigilant about their online security and consider updating their passwords and monitoring their accounts for any unusual activity.

Aug 17, 2026

Microsoft working on Defender patch for ShieldBreak zero-day

BleepingComputer

Microsoft is currently developing a security patch for a zero-day vulnerability known as 'ShieldBreak,' which was disclosed last week by researcher Nightmare Eclipse. This vulnerability is tracked as CVE-2026-69414 and poses a significant risk, as it can potentially allow attackers to exploit Microsoft Defender, an essential security tool for many users and organizations. The information about this vulnerability is particularly concerning because it could be leveraged by cybercriminals to bypass security measures, compromising systems and data. Microsoft is urging users to stay vigilant while they work on a fix to mitigate the threat. As the situation develops, it’s crucial for users of Microsoft Defender to monitor for updates and implement any recommended patches as soon as they are available.

Aug 17, 2026

Recent macOS Screen Sharing Vulnerability Exploited in Attacks

SecurityWeek

Recently, a vulnerability in macOS screen sharing has been exploited by attackers to gain root access to affected systems. Once inside, they deployed a Monero miner, which utilizes the system's resources to mine the cryptocurrency without the owner's consent. This incident raises concerns for macOS users, particularly those who rely on screen sharing features for remote work or support. The exploitation of this vulnerability not only compromises the integrity of the systems involved but also highlights the need for users to stay vigilant about software updates and security practices. As the attacks are ongoing, users should be particularly cautious and monitor their systems for unusual activity.

Aug 17, 2026

Invisible AI Prompts Trigger Court Sanctions

Security Affairs

A litigant in a case against the New York Bariatric Group attempted to manipulate a court ruling by including AI prompt injections in his filing. These prompts were designed to instruct any AI reviewing the documents to rule in his favor. The presiding judge noticed this unusual tactic and responded by banning the individual from submitting electronic filings. This incident raises concerns about the misuse of AI in legal proceedings and the potential for similar tactics in future cases. Judges and courts may need to implement stricter guidelines to prevent such manipulative practices, ensuring that legal processes remain fair and unbiased.

Aug 17, 2026

Critical SAP Commerce Cloud Vulnerability Exploited 3 Days After Disclosure

SecurityWeek

A serious vulnerability in SAP Commerce Cloud, identified as CVE-2026-58231, has been actively exploited just three days after its disclosure. This flaw allows attackers to execute arbitrary code, which can compromise internal components of the affected systems. Organizations using SAP Commerce Cloud should be particularly vigilant, as the rapid exploitation indicates a high level of risk. The urgency for companies to patch their systems is critical to prevent unauthorized access and potential data breaches. Users and administrators need to prioritize updates to safeguard their environments against this vulnerability.

Aug 17, 2026

Police bust cybercrime ring accused of stealing €30 million in four-day spree

Help Net Security

German and Brazilian police recently dismantled a cybercrime ring linked to a €30 million bank fraud that targeted a German financial institution. The operation, named 'Klonen,' led to the arrest of four suspects in Brazil, with additional suspects being pursued in Spain and Bulgaria. The investigation began in late 2023 after attackers exploited a flaw in the booking process of the bank. On August 13, law enforcement executed 21 search warrants across several Brazilian cities, including Rio de Janeiro and Goiânia. This incident underscores the ongoing risks of cybercrime, especially in the banking sector, and highlights the need for stronger security measures to protect financial institutions from sophisticated attacks.

Aug 17, 2026