Based Says Unauthorized Access Hit Visa Card Dashboard

Based said an unauthorized party accessed an internal dashboard for its Visa card program on Oct. 5, potentially exposing cardholders’ personal information while leaving payment credentials and customer funds unaffected.

The potentially exposed data includes names, identification or passport numbers, birth dates and addresses collected for the card program. Based said the attack was stopped and contained after it was detected.

Co-founder Edison said compliance and operations teams are contacting affected users. Based also notified Singapore’s Personal Data Protection Commission, the country’s privacy regulator, and filed a police report.

The company said card numbers, CVVs, PINs, identity-document photographs and liveness-check images were not affected. No funds were accessed or lost, and the Visa cards continued operating normally.

Based has not disclosed the number of potentially affected cardholders, how the attacker entered the dashboard or whether every exposed record was viewed. The incident was limited to the compliance data supporting the card product, while Based’s self-custody trading wallet was not compromised.