SafePal, a hardware wallet manufacturer, disclosed an authorization flaw in an order-tracking plug-in that exposed personal data of approximately 39,798 customers. The company has fixed the issue, reduced data retention, and is engaging third-party security experts.