A Gnosis Pay customer shared a breach notification detailing the exposure of personal and financial data, including information linked to their card and crypto wallet. Their card was canceled on November 3, with no suspicious transactions or movement of funds detected. Gnosis Pay said it replaced compromised credentials, addressed the vulnerability and made 3D Secure verification mandatory for online payments until the legacy system’s planned retirement on December 20. The company also warned customers about phishing attempts and arranged monitoring for potential misuse of the stolen data. According to OpenRate, Gnosis Pay had around 2,400 daily active cardholders and processed $263,200 in transactions over the previous 24 hours, while the number of affected customers remains undisclosed.
Source: Read the original article
