October 15, 2026

Passport plus wallet address in one database: the BasedApp leak and why it's worse than usual

Crypto card provider BasedApp disclosed a breach on October 8. An attacker got into its internal system; the company detected the attack on October 5.

WHAT LEAKED

Names, dates of birth, nationalities, home addresses, passport or Singapore ID numbers, emails and phone numbers. All of it tied to customers' crypto wallet addresses.

The company says the attacker failed to reach customer funds. It hasn't said how many people are affected.

WHY THIS IS WORSE THAN AN ORDINARY LEAK

A wallet address is public: anyone can see its balance and full history. The leak ties that to your name and home. That creates three threats:

• targeted phishing: "support" emails and calls with your real details and real amounts;
• address poisoning: dust from lookalike addresses landing in your history;
• physical threats to people holding large balances.

WHAT TO DO IF YOU USED BASEDAPP

• Don't trust emails or calls "from BasedApp" or "from an exchange", even if they contain correct details.
• Move large amounts to a new wallet that isn't in the leaked database.
• Never copy addresses from your history: check the full address.
• Check any address you're sent before you transfer.

🔎 Check an address: https://amlconsensus.com/en