Gnosis Pay Breach Exposed Full Card Numbers and CVVs; 3D Secure Now Mandatory
November 8: According to Cointelegraph, the Gnosis Pay customer breach notification it reviewed shows that this data breach exposed full payment card numbers, expiry dates, CVV codes, names, addresses, linked wallet addresses, emails, phone numbers and nationalities, and some users' banking details such as IBAN and BIC were also leaked. Gnosis Pay's official blog said it detected unauthorized access to its legacy consumer card system on November 3 and began handling the incident within two hours; user funds and the enterprise-grade platform were unaffected. Credentials have now been replaced, and 3D Secure verification has been made mandatory for all online card payments until the system is decommissioned on December 20. Gnosis Pay did not disclose the number of affected users.
Earlier report: Gnosis Pay's consumer card system suffered a data breach, with user funds unaffected.