Gnosis Pay breach exposes card details, personal data and crypto wallet information
Summary
Gnosis Pay disclosed unauthorized access to its legacy consumer card system, detected on Nov. 3 and contained within two hours. Exposed data included full card numbers, expiration dates, CVVs, names, home and wallet addresses, contact details, and some banking information. The company said customer funds and its separate enterprise platform were unaffected, and one customer’s card was canceled without suspicious transactions or fund movement. Gnosis Pay replaced compromised credentials, fixed the vulnerability, required 3D Secure for online payments, and warned customers about phishing and potential data misuse. It did not say how many customers were affected.
