Gnosis Pay breach exposes card details and crypto wallet addresses

Gnosis Pay breach — Crypto-linked Visa debit card provider Gnosis Pay has disclosed a security breach that exposed sensitive customer payment card details, personal information, and cryptocurrency wallet addresses.

The company said it detected unauthorized access to its legacy consumer card system on November 3 and contained the incident within two hours. According to breach notifications, the exposed data included full payment card numbers, CVV codes, expiration dates, customer names, home addresses, and linked crypto wallet addresses.

Gnosis Pay stated that customer funds were safe and its separate enterprise platform was unaffected. The company has canceled compromised cards, replaced security credentials, and made 3D Secure verification mandatory for online payments until the legacy system is retired on December 20.

It warned customers of potential phishing attempts and said it was arranging monitoring for misuse of the stolen data. The firm did not disclose how many customers were affected. Data from OpenRate indicated Gnosis Pay had approximately 2,400 daily active cardholders processing around $263,200 in transactions over a recent 24-hour period.