Gnosis Pay discloses a breach of its legacy card system, with customer data exposed and funds unaffected

Gnosis Pay has disclosed that attackers accessed the system behind its Gnosis Pay-branded consumer cards. Its monitoring detected the unauthorised access on 3 November, containment began within two hours, and the breach was announced on 6 November. The company says customer funds were not affected and that its enterprise platform, which runs white-label card programmes, was not touched.

Gnosis Pay has not said how many customers were affected. Cointelegraph, citing breach notices, reports exposed data including card numbers, names, home addresses and wallet addresses; Rotki founder Lefteris Karapetsas said his own name, address, card number and linked wallets were exposed.

The company has replaced the compromised credentials, made 3D Secure mandatory for online payments and reported the breach to its partners, its card issuer and data protection authorities. The consumer platform was already scheduled to retire on 20 December.