Baanx US Corp. (Crypto Life card program)

Baanx reset passwords and two-factor authentication for all Crypto Life accounts; users must complete reset to regain access before continuing to use cards.

Event: Sep 23

First public: Oct 30

Third-party report: unknown

Acknowledged: Oct 30

Other explanations considered: AG lists do not state cause; may be vendor breach, misdirected mail, or insider error rather than intrusion.

Corrected in independent review (reclass): This is an AG notice of access on about 23 to 28 Sep and 17 Oct, posted 30 Oct: the same pattern classed disclosure_of_older_incident for HCA, El Camino and others. In-window password and 2FA reset is real remediation but follows the disclosure. EW-020 and...

1. Sep 23 · DIS
   State AG breach posting in window. Incident date 2026-09-23; posted 2026-10-30; records 6,594 total (IN AG). Disclosure lag about 37 days.
   Source
2. Sep 23 00:00 UTC · DIS
   CA AG posting (reported 30 Oct) and notice letter dated 30 Oct: unknown parties accessed personal data of certain US Crypto Life accounts between about 23 and 28 Sep 2026 and on about 17 Oct 2026, 'including via a third-party service provider's access and via...
   Source
3. Oct 30 00:00 UTC · REM
   Baanx reset passwords and two-factor authentication for all Crypto Life accounts; users must complete reset to regain access before continuing to use cards.
   Source