Gnosis Pay breach exposes card details, personal data and crypto wallet information

The company detected unauthorized access to its legacy consumer card system on Nov. 3 and began containing the breach within two hours. According to breach notifications reviewed by Cointelegraph, the exposed information includes full payment card numbers, expiration dates, CVV codes, customer names, home addresses and wallet addresses linked to affected accounts.

The compromised data also includes email addresses, phone numbers, nationalities and, in some cases, banking details such as IBAN and BIC information. One notification confirmed that the customer's card was canceled on Nov. 3, with no suspicious transactions or movement of funds detected.

Security Response

Gnosis Pay said it replaced compromised security credentials, addressed the vulnerability and made 3D Secure verification mandatory for online payments until the legacy system's planned retirement on Dec. 20.

Customer Impact

According to data from OpenRate, Gnosis Pay had around 2,400 daily active cardholders and processed $263,200 in transactions over the previous 24 hours. The company did not disclose how many customers were affected and did not immediately respond to Cointelegraph's request for comment.