CryptoSlate
SafePal disclosed a breach exposing personal data from roughly 40,000 customers, one of the largest hardware-wallet-vendor exposures to date. It also reinforces an alarming pattern: digital theft is bleeding into physical violence against crypto holders.
The leaked records include identifying information used for order fulfillment, support, and shipping. That is exactly the trail that enables wrench attacks, in which criminals identify, locate, and physically coerce crypto holders into surrendering seed phrases or signing transactions. France has logged a sharp rise in such cases through the first half of 2026, with several high-profile kidnappings and attempted abductions.
Why it matters
The escalation is structural. A hardware wallet protects keys at rest but cannot protect the human attached to them. Customer databases held by wallet vendors, exchanges, and KYC providers have become operational intelligence for criminals crossing from online fraud into physical assault. The $100 million in crypto physically stolen from holders globally over the past year is no longer a curiosity; it is a recurring line item in organized-crime playbooks. France's response, including dedicated law-enforcement coordination and tighter data-handling scrutiny, is becoming a template other jurisdictions are watching closely.
Market impact
For self-custody users, the breach is a reminder that buying a hardware wallet is the easy part. Operational security must now extend to address hygiene, shipping-name discipline, and limiting which vendors hold real identity data. Expect cold-storage vendors to compete harder on zero-knowledge shipping, pseudonymous purchasing, and on-device key generation with no backend records at all.
Frequently asked questions
-
What happened in the SafePal breach?
SafePal disclosed a data breach exposing personal information from roughly 40,000 customers, including identifying details used for order fulfillment, support, and shipping.
-
Why is this connected to crypto kidnappings?
The leaked personal data provides criminals with the information needed to identify, locate, and physically target crypto holders, enabling wrench attacks where victims are coerced into surrendering keys.
-
How much crypto has been physically stolen from holders?
Roughly $100 million in crypto has been physically stolen from holders globally over the past year, marking a recurring shift from digital theft into physical violence.
-
What is a wrench attack?
A wrench attack is when criminals physically coerce a crypto holder into surrendering their seed phrase or signing a transaction, bypassing even the strongest hardware-wallet protections.
-
How can hardware wallet users reduce their exposure?
Users are advised to practice address hygiene, vary shipping names, limit which vendors hold real identity data, and favor vendors offering pseudonymous purchasing and zero-knowledge shipping.
CoinDesk
TheBlock
Lookonchain
WatcherGuru