Gnosis Pay Reports Security Breach Affecting Customer Personal Data

Gnosis Pay reported a data breach following unauthorized access to an outdated debit card system discovered on November 3. The incident affected certain customer information, but their funds remained secure.

The company stated that it localized the incident within two hours, replaced compromised security credentials, and fixed the vulnerability. The corporate platform supporting card programs under other brands was not affected.

For online payments, Gnosis Pay has implemented mandatory 3D Secure verification. This requirement will be in place until the affected system is decommissioned, scheduled for December 20, 2026.

The incident occurred amid other security breaches in the cryptocurrency payment card sector. In October, Based reported unauthorized access to the internal management panel of the Visa card program, which could have exposed customer information. However, the perpetrator reportedly did not gain access to funds.

In August, a vulnerability in the Rain card infrastructure on the Solana network allowed unauthorized debits from the balances of Tria and Avici users. Previously, Revolut also reported that a third party obtained confidential customer information through a fake request sent from a domain mimicking a governmental one. Customer funds and company systems were not compromised.