Gnosis Pay discloses legacy system breach exposing customer and wallet data

Crypto debit card provider Gnosis Pay disclosed a security breach involving its consumer card platform. Cointelegraph, The Block, and Protos reported that the company detected unauthorised access to its legacy card system on November 3. Cointelegraph noted that Gnosis Pay began containing the breach within two hours of detection. [1][3][4]

The incident exposed sensitive customer data including home addresses, cryptocurrency wallet addresses, and payment credentials. Cointelegraph reported that breach notifications revealed exposed full payment card numbers and expiration dates. Protos separately noted that exposed information included names as printed on cards, shipping addresses, and account references. [1][4]

Cointelegraph, The Cryptonomist, The Block, The Defiant, and Decrypt all reported that customer funds were not affected by the incident. Cointelegraph, The Defiant, and Decrypt added that the firm's separate enterprise platform, which powers white-label card programs, was untouched. [1][2][3][5][7]

CoinLaw reported that the breach of the consumer card system occurred weeks before a planned shutdown. The Defiant reported that Gnosis Pay has not disclosed the total number of customers impacted by the incident. [5][6]