Crypto card provider Gnosis Pay reported that hackers accessed customer information through the system supporting its branded cards, though the company stated that user funds remained unaffected.
The company’s monitoring systems detected unauthorized access on Nov. 3, and containment efforts began within two hours, Gnosis Pay said in a blog post. The breach was limited to Gnosis Pay’s consumer business platform, which was already scheduled for retirement on Dec. 20.
Scope of the Incident
Gnosis Pay did not disclose the number of affected customers or specify the categories of data exposed. The company said it emailed each affected customer with details of what was taken from their account.
The enterprise platform, which powers white-label card programs for fintech firms, wallets and neobanks, was not affected by the incident.
Security Measures and Notifications
In response to the breach, Gnosis Pay has made 3D Secure, an extra verification step, mandatory for all online card payments until the consumer platform is retired. The company urged customers to be wary of unexpected messages about their cards.
Gnosis Pay said it has reported the breach to its partners, its card issuer and data protection authorities.
