Gnosis Pay Suffers Data Breach, Full Payment Card Numbers and Wallet Addresses Exposed

Odaily reports: Cryptocurrency payment card provider Gnosis Pay has disclosed that its traditional consumer card system was accessed without authorization on November 3, and it began containing the breach within two hours. The company stated that customer funds and the independent enterprise platform supporting white-label card programs were not affected.

The leaked information includes full payment card numbers, expiration dates, CVVs, customer names, home addresses, and associated cryptocurrency wallet addresses. Some records also include email addresses, phone numbers, nationalities, and banking information such as IBAN and BIC.

A notice confirmed that the cards of affected customers were canceled on November 3, and no suspicious transactions or fund transfers were found. Gnosis Pay has replaced the affected security credentials, patched the vulnerability, and mandated the enablement of 3D Secure verification before the legacy system is scheduled to be decommissioned on December 20.

Gnosis Pay has reminded customers to be vigilant against phishing attacks leveraging personal or transaction information, and has arranged monitoring for potential misuse of the stolen data. OpenRate data shows that it has approximately 2,400 daily active cardholders, with a transaction volume of $263,200 over the past 24 hours; the company did not disclose the number of affected customers. (Cointelegraph)