Gnosis Pay says hackers accessed customer information through the system behind its own branded cards. The company says customer funds weren't affected, but it hasn't said how many customers or what data the breach touched.
Crypto card provider Gnosis Pay said hackers accessed customer information through the system behind its own branded cards. The disclosure follows other security incidents across the industry.
Detection on Nov. 3 and containment within two hours
Gnosis Pay's monitoring systems detected unauthorized access on Nov. 3, and containment began within two hours. The company has since replaced the compromised security credentials and fixed the vulnerability. It said customer funds weren't affected.
The breach was limited to Gnosis Pay's consumer business, whose platform was already scheduled for retirement on Dec. 20. Its enterprise platform, which powers white-label card programs for fintech firms, wallets and neobanks, wasn't affected.
What Gnosis Pay hasn't disclosed
The company didn't say how many customers were affected or what data was exposed. It did say it emailed each affected customer with details of what was taken from their account.
Gnosis Pay has stepped up monitoring of card activity and wallets for fraud. It also made 3D Secure, an extra verification step, mandatory for all online card payments until the consumer platform is retired. In addition, it reported the breach to its partners, its card issuer and data protection authorities, and is arranging specialist monitoring for signs of misuse.
Warnings for customers
The company warned customers about phishing and urged them to be wary of unexpected messages about their cards, even ones that include real personal details or purchases. Gnosis Pay said it will never ask for seed phrases, PINs or full card numbers, or ask users to move funds.
It also told customers to be careful about sharing their address or details of their crypto holdings, both online and offline.
Source: Decrypt
Trading involves risk.
Risk Disclaimer
