Gnosis Pay Breach Exposes User Data, Triggering Immediate Phishing Alerts
British fintech Gnosis Pay confirmed a data breach on November 3 affecting holders of its retail Visa debit cards, though user crypto funds remain safe.
The breach marks a concerning trend in this fall, as attackers increasingly target traditional fiat infrastructure that connects digital assets to the real world rather than going after blockchains directly. While institutional partners and investors remain unaffected, the company's legacy B2C card processing system was compromised.
Immediate Response
Gnosis Pay's security team acted swiftly, containing the threat and cutting off access via compromised keys within two hours of discovering the breach. The company has since emailed affected users with a detailed list of exposed data.
we and our Partner Apps will never ask for security credentials such as seed phrases, private keys, PINs or full card numbers to verify or cancel transactions
Emergency Measures
Until the platform's scheduled retirement on December 20, Gnosis Pay operates in emergency mode with enhanced transaction monitoring and mandatory 3D Secure verification for all online payments. The company has issued urgent phishing alerts as scammers begin exploiting the stolen data.
Users are warned to be suspicious of all incoming requests, particularly those posing as official customer support. Legitimate account changes can only be made directly within the official app.
Related
