Gnosis Pay disclosed a data breach affecting customer information, though funds were not compromised. The company has heightened security measures.
Gnosis Pay Experiences Data Breach
Gnosis Pay, a cryptocurrency card provider, announced on November 3 that hackers had gained unauthorized access to its customer information, marking a troubling incident within the crypto sector. Although the breach did not impact customer funds, it has raised significant concerns regarding the security of personal data.
The company detected the breach quickly and initiated containment measures within two hours. They have since replaced compromised security credentials and addressed the vulnerability. Gnosis Pay’s consumer platform, which is set to cease operations on December 20, was the only segment affected; its enterprise platform remains secure.
Details of the Incident
Gnosis Pay did not disclose the number of customers affected or the specifics of the data accessed but indicated that each impacted customer was informed via email about the breach details. The company acknowledged the importance of protecting personal information, stating, “While funds were not affected, the security of personal information is just as important and we take full responsibility.”
To enhance security, Gnosis Pay has implemented 3D Secure as a mandatory verification step for online payments until the consumer platform is retired. They are also monitoring card activity and wallets for potential fraud and have reported the incident to relevant partners and data protection authorities.
Warnings and Precautions
In light of the breach, Gnosis Pay has advised customers to be vigilant against phishing attempts and to safeguard their personal information. They emphasized that the company will never request sensitive information such as seed phrases, PINs, or full card numbers.
This incident follows a series of security breaches in the cryptocurrency industry, including a significant $6.4 billion hack at Binance and a recent breach at Coinbase involving customer data from a vendor. Such events underscore the ongoing challenges of securing digital assets and the growing risks faced by crypto holders, including physical threats like home invasions and kidnappings targeting those with significant crypto holdings.
