Contents and sources 1 sections
Key points
- The December 20 shutdown was already planned before this breach.
Branded-card system breached
Gnosis Pay disclosed on November 6 that it detected unauthorized access to its branded-card system on November 3, exposing some customer information. The company said affected customers received individual notifications on November 6, while funds and its enterprise platform for white-label cards were unaffected.[1]
The company said containment began within two hours of detection, followed by replacement of affected security credentials and remediation of the vulnerability. It has made 3D Secure verification mandatory for all online card payments, with the measures lasting until the B2C system’s planned retirement on December 20. The shutdown had been announced on September 21.[1][3]
Gnosis Pay advised customers to distrust unexpected messages even if they contain real personal details, and not to click their links. It said it would never request seed phrases, private keys, PINs or full card numbers, or ask customers to move funds by email, text or phone.[1]
Sources & further reading
(4)
When checking a claim, compare the source date, measurement period and conditions. Some linked pages change over time.
For information and education, not investment advice. Crypto assets are volatile. Verify independently.
