Gnosis Pay Data Breach Exposes Card Numbers and Addresses - ForkLog
Cryptocurrency payment service Gnosis Pay reported a data breach on November 3, exposing client bank card numbers, home addresses, and wallet information.
The breach was discovered on November 3 in the system servicing Gnosis Pay's branded debit cards. According to notifications sent to affected clients, attackers accessed bank card numbers, expiration dates, CVV codes, cardholder names, home addresses, email addresses, phone numbers, and wallet addresses linked to accounts.
In some cases, IBAN and BIC bank details were also compromised. The company stated that security specialists began addressing the incident within two hours, replacing compromised credentials and fixing the exploited vulnerability.
Security Response
Gnosis Pay assured that user funds remain safe, emphasizing that only the company's old card servicing system was affected. Following the incident, the company implemented mandatory 3D Secure verification for all online payments using its cards.
At this point I really don't know what to say @gnosispay — Full home, name and address details — Card number — All wallet addresses linked to the account Extremely disappointed. You had already lost me as a user but you could have at least protected my data …. Damn shame, really.
The company also increased monitoring of card transactions and crypto wallets to detect suspicious activity. Gnosis Pay urged users not to click on suspicious links and to avoid sharing sensitive information with third parties.
Previous Incident
This breach follows a June incident where attackers stole approximately $1.5 million from Gnosis Pay users. The project compensated those losses from its own funds.
Related
