Gnosis Pay detected unauthorized access on November 3 to the system powering its branded cards, exposing certain customer information. The incident was contained within two hours, the compromised credentials were replaced and the vulnerability was fixed, with no customer funds affected. The consumer platform, already scheduled for retirement on December 20, now requires additional verification for online payments, while the enterprise platform was not affected. The company did not disclose how many customers were involved or the precise nature of the exposed data, but it notified each affected customer and warned them about phishing attempts. It also reported the incident to its card issuer, partners and data protection authorities.
Source: Read the original article
