Gnosis Pay Consumer Card System Suffers Data Breach, User Funds Unaffected

November 6: According to the official Gnosis Pay blog, its monitoring system detected unauthorized access on November 3 to the system supporting Gnosis Pay-branded cards (the B2C business line), resulting in the leak of some customer information. User funds were not affected.

The team began remediation within two hours of detection, has replaced the affected security credentials and fixed the vulnerability; the enterprise platform supporting all of its white-label card programs was not affected.

Gnosis Pay has emailed all affected users to inform them of the specific information leaked, and has made 3D Secure verification mandatory for all online card payments. These measures will remain in place until the B2C system is decommissioned as planned on December 20.

Gnosis Pay reminded users to be wary of phishing messages and never to disclose their seed phrase, private key, PIN or full card number.