Based updates on the crypto card data breach: regulators have been notified and a police report has been filed; transaction wallets and the app are unaffected.

PANews October 12 news: Based co-founder Edison posted an update on the crypto card data breach incident. The compliance and operations teams have been responding to affected users, have notified the PDPC (Personal Data Protection Commission) and relevant regulatory authorities, and have filed a report with the police. The crypto card business is operating normally. The transaction wallet and app are unaffected; the wallet uses a self-custody model, the platform does not hold keys, social login is managed by Privy, and users can continue to trade on the Based platform.

In addition, regarding the externally mentioned "admin backend breached five months ago," the team clarified that the system is unrelated to the crypto card business and does not contain customer data. It was only an early OpenClaw admin product prototype for internal testing in March 2026, and development was subsequently stopped. The current priorities are to continue supporting affected customers, tighten team security controls and monitoring, and continue building the trading experience.

Previously, on October 5, an unauthorized party accessed an internal dashboard used to manage the Based Visa Card program. The attacker may have obtained some cardholders' KYC data collected by the card issuer, including names, ID or passport numbers, dates of birth, and addresses.