Gnosis Pay suffers data breach; customer funds remain safe
Incident details and immediate response
Gnosis Pay reported a data breach that involved unauthorized access to its legacy debit card system on November 3. While some customer information was exposed, the company confirmed that customer funds remained safe throughout the incident.
Gnosis Pay addressed the issue quickly, containing the breach within two hours, updating compromised security measures, and ensuring the vulnerability was fixed. The company has made 3D Secure verification mandatory for online card payments until the affected system is retired on December 20.
Key points
- Unauthorized access detected on November 3.
- Customer funds were not affected during the breach.
- 3D Secure verification now required for online card payments.
- The legacy system will be retired by December 20.
Context on security vulnerabilities
The breach highlights ongoing security concerns in the crypto card industry, where providers often rely on outdated systems and third-party infrastructure. Similar incidents have occurred recently, including attacks on other crypto card services that exposed customer data or compromised funds.