BasedApp Visa card program: internal dashboard breached; KYC may be exposed
05 Oct 2026 (wider coverage 08–09 Oct): Based said an outsider reached an internal dashboard for its Visa card program.
KYC for some cardholders may be exposed (name, ID or passport number, date of birth, address; some reports add email, phone, and linked wallets).
Card numbers, CVVs, PINs, ID photos, the Based Wallet, and funds were not affected per reports.
Later write-ups describe a Google sign-in misconfiguration on an AI-agent dashboard; Based has not confirmed that path or published a full post-mortem. Main follow-on risk is targeted phishing using leaked identity and wallet data. news.
369 take
A KYC leak feeds phishing more than it empties wallets by itself. Expect fake support and fake card-reset links. Based cardholders: verify outreach on official channels only.
Funds and card secrets were reported untouched; treat the leaked identity data as burned for phishing purposes.
Sources