Summary
- Environment: US Crypto Life accounts and administrative access
- Operational impact: Personal information and protected authentication data potentially affected
- Financial impact: No incident cost disclosed
- Record status: Developing record. Reviewed November 4, 2026; updated as evidence emerges.
What happened
Baanx US Corp. reported unauthorized access to US Crypto Life account information around September 23–28 and again around October 17, 2026. [1]
Impact
Potentially affected fields included identity and contact details, transaction history, Social Security numbers, hashed passwords and encrypted multi-factor authentication tokens. Baanx reported no evidence that customer funds were accessed. [1]
Timeline
Customer notification letter dated
Customer notification letter dated, according to the published account. Incident notice.
[1]Briefing updated
This briefing was last reviewed and updated on November 4, 2026.
Threat Group & Attack Vector
Access involved a third-party provider and an internal administrative system. The notice does not map each route to a particular access window. [1]
Actors
- No threat actor group has been identified in the reviewed public evidence.
TTPs
- No specific MITRE ATT&CK technique is currently mapped for this case.
Response
Baanx contained access, reset account passwords and two-factor authentication, and offered two years of identity protection and credit monitoring. [1]