Baanx / Crypto Life

Documented events with consequences still open. Each entry carries a source and a date.

1. Sep 23, 2026 Data breach Severe ● open

   Unauthorised access to data of US Crypto Life customers (Baanx US Corp): Social Security numbers, personal details, transaction history and encrypted credentials exposed; customer notices from 30 October 2026

   According to the official notice from Baanx US Corp, dated 30 October 2026 and filed with the California Attorney General, unknown parties accessed personal data of some US customers of the Crypto Life card programme between 23 and 28 September 2026 and again on or about 17 October 2026. The weak point was on Baanx's side, in two places: a third-party service provider's access and an internal administrative system. The data potentially exposed includes first and last name, date of birth, address, phone number, email address, transaction history, password (hashed), multi-factor authentication token (encrypted) and Social Security number, where provided. Baanx says the access has been contained and that, based on the investigation so far, there is no evidence that customer funds were accessed; it reset passwords and two-factor authentication on the affected accounts and is offering 24 months of free credit monitoring and identity protection through Experian. The number of affected customers has not been disclosed. The notice covers only the Crypto Life programme in the United States: it does not name other card programmes built on Baanx infrastructure, nor European or UK customers.

   ↗ source

verified on Nov 6, 2026

Weighted average across 1 public review platform (256 reviews in total), weighted by volume. This is not our rating: it is those platforms’ average.