Gnosis Pay breach exposes card details, personal data and crypto wallet information
The crypto debit card provider said customer funds remained safe despite the exposure of sensitive financial and personal information.
Crypto debit card provider Gnosis Pay announced a security breach on Friday, revealing sensitive personal and financial information of its customers. The compromised data includes payment card details, expiration dates, CVV codes, full names, home addresses, and wallet addresses associated with affected accounts. Additionally, email addresses, phone numbers, nationalities, and banking information such as IBAN and BIC were exposed. Gnosis Pay stated that customer funds remained secure during the incident.
The company detected unauthorized access to its legacy consumer card system on November 3 and contained the breach within two hours. Gnosis Pay replaced compromised security credentials and implemented mandatory 3D Secure verification for online payments until the legacy system's planned retirement on December 20. They also warned customers about phishing attempts using their personal or transaction details and arranged monitoring for potential misuse of the stolen data.
While the exact number of affected customers was not disclosed, third-party platform OpenRate reported that Gnosis Pay had approximately 2,400 daily active cardholders, processing $263,200 in transactions over the previous 24 hours. The company did not respond to requests for comment.
Written by urgent.news from Cointelegraph's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
