Gnosis Pay Customer Data Breach Involves Full Card Numbers and CVVs, 3D Secure Verification Mandatory for Online Payments

Odaily: Gnosis Pay's customer breach notification shows that this data breach involved full payment card numbers, expiration dates, CVV codes, names, home addresses, associated wallet addresses, email addresses, phone numbers, and nationalities. Some users' banking information, including IBAN and BIC, was also compromised. According to Gnosis Pay's official blog, it discovered unauthorized access to its legacy consumer card system on November 3 and began remediation within two hours. User funds and enterprise-level platforms were unaffected; the relevant credentials have been replaced, and all online card payments currently require 3D Secure verification, a measure that will remain in place until the system is decommissioned on December 20. Gnosis Pay did not disclose the number of affected users.