Gnosis Pay says breach affected customer data in branded-card system

Gnosis Pay said it detected unauthorized access on Nov. 3 in a legacy system that supports its branded consumer cards. The company said the incident affected certain customer information.

According to Gnosis Pay, containment began within two hours of detection. It said compromised credentials were replaced and the vulnerability involved was addressed.

The company said customer funds were unaffected. It also said its separate enterprise card platform was not impacted by the incident.

Gnosis Pay said it notified affected customers individually, but it has not publicly disclosed the number of people affected or provided a complete list of the information exposed.

Company statement leaves data scope unresolved

Gnosis Pay’s public description of the incident does not specify which customer fields were accessed. That means claims about the precise data involved should be treated separately from the company’s confirmed statement.

Independent reports citing customer breach notifications said the exposed information could include card details, names, home addresses and linked crypto-wallet addresses. Some reports also listed contact and banking information. Gnosis Pay has not publicly confirmed that full list or clarified whether any card numbers were full or masked.

The difference between the company’s broad description and the data types reported from customer notices leaves the public scope of the breach unresolved.

Containment and customer notifications

The company said it began containing the incident within two hours, replaced compromised credentials and fixed the vulnerability. It also said affected customers were notified individually.

Gnosis Pay’s statement that funds were unaffected addresses the status of customer balances, but it does not change the potential privacy implications of exposure involving personal or card-related information. Customers who received a notification would need to rely on the details provided directly to them for the specific information involved in their case.

The incident follows another reported security event involving a crypto service, as covered in Mercado Bitcoin suspends deposits and withdrawals after reported security incident.

• Unauthorized access was detected on Nov. 3 in a legacy branded-card system.
• Gnosis Pay said containment began within two hours.
• The company said customer funds and its enterprise platform were unaffected.
• The number of affected customers has not been publicly disclosed.

Security disclosures remain important for card-linked crypto services

The incident highlights the operational distinction between a consumer card system and an enterprise platform. Gnosis Pay said the affected system was the legacy environment for branded consumer cards, while its enterprise offering was not affected.

It also underscores why public disclosures need to distinguish confirmed information from details reported through customer communications. In this case, the existence of unauthorized access, the remediation steps and the status of funds were stated by the company, while the detailed categories of exposed information were reported independently.

Security issues can arise across different layers of crypto infrastructure. Bitcoin Core discloses undo-file overflow vulnerability affecting extreme storage conditions concerned a separate software vulnerability and is not related to the Gnosis Pay incident.

Continue reading: Mercado Bitcoin suspends deposits and withdrawals after reported security incident on BTCNews.

Continue reading: Bitcoin Core discloses undo-file overflow vulnerability affecting extreme storage conditions on BTCNews.

Sources

• Decrypt: Crypto Card Provider Gnosis Pay Says Hackers Accessed Customer Data
• Cointelegraph: Gnosis Pay breach exposes card details, personal data and crypto wallet information
• CoinDesk: Gnosis Pay breach exposes card numbers, home addresses and linked crypto wallets
• Gnosis Pay: Recovering Your Funds After the Security Incident – Gnosis Pay

Our creator. Creates amazing NFT collections! Support the editor - Bitcoin_Man(TON) / Bitcoin Man Stickers(TON) / BM Numbers (TON) / Comics Book (TON) / Bitcoin_Man (ETH)

Pi Network (Guide)is a new digital currency developed by Stanford PhDs with over 55 million participants worldwide. To get your Pi, follow this link https://minepi.com/Tsybko and use my username (Tsybko) as the invite code.

Binance: Use this link to sign up and get $100 free and 10% off your first months Binance Futures fees (Terms and Conditions).

Bitget: Use this link Use the Rewards Center and win up to 5027 USDT!(Review)

Bybit: Use this link (all possible discounts on commissions and bonuses up to $30,030 included) If you register through the application, then at the time of registration simply enter in the reference: WB8XZ4 - (manual)