Gnosis Pay has confirmed that hackers accessed its consumer-card system, exposing some customers’ personal information. The company announced the breach on November 6, three days after detecting unauthorized access. It said the incident did not affect customer funds but prompted changes to its card security procedures.
Unauthorized Access Hit Gnosis Pay Card System
Gnosis Pay discovered the breach on November 3 and started responding within two hours. Its security team replaced the affected credentials and fixed the vulnerability used to gain access.
Related: Former FBI Agent Steals $2.47M in Crypto, Exposes 35 Investigations
The incident involved only the business-to-consumer (B2C) card platform. Gnosis Pay’s enterprise service, which provides white-label card programs to other businesses, was unaffected.
The company has since made 3D Secure verification compulsory for online payments and increased wallet monitoring. These changes will remain until December 20, 2026, when Gnosis Pay plans to shut down the affected platform.
Rotki Founder Questions Data Protection
Rotki founder Lefteris Karapetsas said his exposed information included his name, home address, card number and linked wallet addresses.
He questioned Gnosis Pay’s handling of customer information in a post on X. “You had already lost me as a user but you could have at least protected my data,” he wrote.
Gnosis Pay has also cautioned customers about phishing attempts following the incident. It advised them not to disclose their PINs, seed phrases or private keys. The company said it had notified relevant authorities and hired specialists to monitor possible misuse of the exposed information.
Related: South Korean Crypto Exchange Gopax Stops Withdrawals After Hack Threat
Disclaimer: The information presented in this article is for informational and educational purposes only. The article does not constitute financial advice or advice of any kind. Coin Edition is not responsible for any losses incurred as a result of the utilization of content, products, or services mentioned. Readers are advised to exercise caution before taking any action related to the company.
