Gnosis Pay, a provider of crypto-linked Visa debit cards, reported a significant security breach that exposed sensitive personal and financial information of its customers. The company revealed on Friday that attackers accessed payment card details, home addresses, and cryptocurrency wallet addresses linked to account holders.
Scope of breach and affected data
The company identified unauthorized access to its legacy consumer card system on November 3 and stated it began remedial action within two hours. Gnosis Pay emphasized that funds belonging to customers were not affected and that its enterprise platform, which powers white-label card programs for partners, remained secure.
According to breach notifications reviewed by cointelegraph, the compromised information includes full payment card numbers, expiration dates, CVV codes, customer names, home addresses, and wallet addresses. Additional data such as email addresses, phone numbers, nationalities, as well as banking data like IBAN and BIC numbers, were also reportedly exposed for some users.
Gnosis Pay informed affected customers that exposed data may include critical card and identity details, advising heightened caution against phishing attempts and potential misuse.
One customer notification confirmed that the impacted card was canceled on the same day the breach occurred, and no unauthorized transactions took place.
Company response and mitigation steps
The company stated it has replaced compromised security credentials and addressed the system vulnerability. Gnosis Pay also made 3D Secure verification mandatory for all online transactions on its affected platform until the legacy system is fully retired on December 20. The firm is implementing monitoring for potential fraudulent use of the stolen data and has urged customers to be vigilant regarding phishing scams that may exploit their leaked details.
Gnosis Pay is a fintech company known for linking traditional payment cards to cryptocurrency wallets, allowing users to spend digital assets directly via Visa’s network.
Mini dictionary: 3D Secure, a security protocol designed to provide an additional layer of authentication for online card transactions, reduces the risk of unauthorized payments by requiring users to complete a verification step during checkout.
Scale of usage and ongoing investigation
Data from OpenRate, an analytics platform that tracks crypto card usage, indicates that Gnosis Pay currently serves around 2,400 daily active cardholders. Over the 24 hours prior to the disclosure, the network processed $263,200 in transactions.
| Metric | Value |
|---|---|
| Daily active cardholders | 2,400 |
| 24-hour transaction volume | $263,200 |
Gnosis Pay has not specified the exact number of customers impacted by the breach and has not responded to additional requests for comment from cointelegraph regarding the incident.
