TREE NEWS update: Gnosis Pay’s data breach exposed full payment card numbers, expiry dates, CVV codes, names, addresses, linked wallet addresses, emails, phone numbers and nationalities, with some users’ IBAN and BIC banking details also leaked. The company said it detected unauthorized access to its legacy consumer card system on Nov. 3 and began containment within two hours, adding that user funds and the enterprise platform were unaffected. Gnosis Pay has rotated credentials and made 3D Secure mandatory for all online card payments until the system is retired on Dec. 20, without disclosing the number of affected users.
Gnosis Pay Breach Exposed Full Card Numbers, CVVs; 3D Secure Now Mandatory
The exposure of CVVs and full card numbers alongside wallet addresses is the notable part: it links identity and banking data to on-chain activity in a single leak, raising the risk of targeted phishing rather than simple card fraud. The rapid containment and the decision to retire the legacy system by Dec. 20 suggest the company is treating the old infrastructure as the root problem, but the undisclosed number of affected users leaves the real scope unclear. Whether 3D Secure as a stopgap holds up through the retirement, and how affected users are notified, is the open question.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.