Gnosis Pay data breach exposes customer info; funds unaffected

The detail that matters here is the vector: a legacy debit card system, not the core wallet or on-chain infrastructure. That distinction supports the claim that funds were untouched, but it also points to an older, peripheral system as the weak link — a familiar pattern in crypto-adjacent fintech, where card rails and KYC data sit outside the audited on-chain perimeter. The affected population is cardholders whose personal information, not balances, is now the exposure. The open questions are scope and disclosure: how many customers, what categories of data, and whether the company fills in those gaps voluntarily or only under pressure.