According to ChainCatcher, Gnosis Pay disclosed on November 6 that its payment card system suffered unauthorized access on November 3, exposing customer names, addresses, card details, and cryptocurrency wallet addresses. The company contained the incident within two hours of discovery, replaced affected credentials, and patched vulnerabilities. Customer funds remained unaffected, and only Gnosis Pay's branded card business was impacted; its enterprise platform supporting white-label payment projects was unaffected.
Gnosis Pay has enabled mandatory 3D Secure verification for online card transactions and increased monitoring for suspicious card and wallet activity. The payment card system is scheduled to sunset on December 20. The company has notified partners, card issuers, and relevant data protection authorities and will conduct a security review.