Edelson Lechtzin Investigates Baanx Crypto Life Data Breach Affecting US Users

Edelson Lechtzin LLP is investigating potential class action claims against Baanx US Corp after the fintech reported unauthorized access to personal information of US Crypto Life users between September 23 and September 28, 2026, and again on or about October 17, 2026. The law firm announced the investigation in a PR Newswire release on November 4, 2026.

What Baanx Reported In The Crypto Life Breach

Baanx Group is a UK-based, FCA-registered fintech that provides white-label, non-custodial crypto card-issuing and processing infrastructure on the Visa, Mastercard, and Discover networks to platforms including MetaMask, Exodus, 1inch, and Ledger. It was acquired by Exodus Movement in May 2026. Baanx US Corp operates the Crypto Life program of cryptocurrency-linked payment products.

According to the release, unauthorized parties accessed personal information tied to certain US Crypto Life user accounts through a third-party service provider's access and an internal administrative system. Baanx said it contained the access and found no evidence that anyone accessed customer funds. The company reset passwords and two-factor authentication for affected accounts, began notifying consumers on October 30, 2026, and reported the incident to the California and Vermont Attorneys General on October 30 and 31, 2026.

The information involved may include name, date of birth, address, phone number, email address, transaction history, hashed passwords, encrypted multi-factor authentication tokens, and Social Security numbers. Baanx is offering 24 months of complimentary identity protection and credit monitoring through Experian IdentityWorks, with a January 29, 2027 enrollment deadline.

Edelson Lechtzin LLP is a national class action law firm with offices in Pennsylvania and California. Marc Edelson, Esq. said users can request a free case evaluation: "Anyone who received a breach notice or believes their information may have been exposed can request a free case evaluation." The firm said a successful case could recover compensation for losses such as lost time, out-of-pocket costs, and loss of privacy.

Baanx's Ownership Under Exodus Movement

According to akta.pro company records, Exodus Movement acquired Baanx.com Ltd and Monavate Holdings Limited from UK-appointed Receivers for $76.3 million in May 2026, bringing regulated card-issuing and processing infrastructure in-house. Exodus separately acquired Baanx US Corp. from W3C Corp for $5 million upfront plus $25 million in deferred consideration over four years, up to $30 million total, consolidating US crypto-card operations.

The same records show UK receivers were appointed over Baanx.com Ltd, Monavate Holdings, and Monavate Ltd in April 2026 after parent W3C Corp defaulted on a $70 million secured loan, triggering a forced M&A process. Baanx Group's total funding stands at $35.3 million, including a $20 million Series A round in March 2024 from investors including Ledger, Tezos, Chiron, and British Business Bank.

Key Dates For Affected Crypto Life Users

Affected users have until January 29, 2027 to enroll in the complimentary Experian IdentityWorks monitoring. Baanx began notifying consumers on October 30, 2026, and reported the incident to the California and Vermont Attorneys General on October 30 and 31, 2026.