Gnosis Pay Breach Exposes Card Details, Wallets and Personal Data

Crypto-linked Visa debit card provider Gnosis Pay disclosed a security breach that exposed sensitive customer information from its legacy consumer card system. The company detected unauthorized access on Nov. 3 and said it contained the incident within two hours. Gnosis Pay reported that customer funds remained safe and that its separate enterprise platform, which powers white-label card programs, was unaffected.

Breach notifications reviewed by Cointelegraph revealed that the exposed data included full payment card numbers, expiration dates, CVV codes, customer names, home addresses and linked cryptocurrency wallet addresses. The compromised records also contained email addresses, phone numbers and nationalities, while some customers’ banking information, including IBAN and BIC details, was exposed.

Gnosis Pay said it canceled affected cards, replaced compromised security credentials and addressed the vulnerability. It also made 3D Secure verification mandatory for online payments until the legacy system’s planned retirement on Dec. 20. One customer was reportedly informed that their card had been canceled, with no suspicious transactions or movement of funds detected.

The company has not disclosed how many customers were affected. According to OpenRate, Gnosis Pay had approximately 2,400 daily active cardholders and processed $263,200 in transactions over the previous 24 hours. Gnosis Pay is monitoring the stolen data for potential misuse and has warned customers to remain alert for phishing attempts using their personal or transaction details.