Gnosis Pay discloses security breach affecting user data

Gnosis Pay recently experienced a security incident affecting its legacy consumer card system. Users searching for information regarding the gnosis pay card learned that the provider detected unauthorized access on November 3. The firm began containing the breach within two hours of discovery, ensuring that its separate enterprise platform and user funds remained unaffected.

According to breach notifications, the exposed information encompassed full payment card numbers, expiration dates, CVV codes, customer names, home addresses, and linked cryptocurrency wallet addresses. Additional compromised data points included email addresses, phone numbers, nationalities, and select banking details such as IBAN and BIC information. One reviewed notification confirmed that an affected customer card was canceled on the same day, with no suspicious transactions or fund movements detected.

Customer funds remain safe following a legacy system data breach at Gnosis Pay.

Managing the Gnosis Pay incident

In response to the unauthorized access, the provider replaced compromised security credentials and addressed the underlying vulnerability. It also implemented mandatory 3D Secure verification for online payments, a requirement slated to remain in place until the legacy system is officially retired on December 20. Furthermore, the organization issued warnings regarding potential phishing attempts utilizing stolen personal or transaction details and stated it is arranging monitoring services to watch for misuse of the compromised data.

OpenRate data indicates that Gnosis Pay maintained around 2,400 daily active cardholders and processed $263,200 in transactions over the 24 hours preceding the disclosure. The company did not reveal the total number of impacted customers and did not immediately respond to requests for comment.

Why it matters

The exposure of sensitive financial and personal details highlights ongoing security vulnerabilities within legacy crypto payment infrastructure. While customer funds were reported safe and active measures were deployed, the incident affects cardholders whose private banking information, card numbers, and wallet addresses were compromised, necessitating increased vigilance against potential phishing and data misuse.