WORLDTECHGnosis Pay Confirms Hack of Legacy Card System Exposing Customer Addresses
Gnosis Pay, which issues white-label stablecoin cards, has confirmed that hackers accessed customer information on the legacy system behind its branded debit cards. The company says customer funds and its enterprise card platform were untouched, but it has not said how many customers were hit.
What the breach reached
Gnosis Pay disclosed the breach after unauthorised access to its legacy debit card system on Nov. 6. The company said extra security checks would remain in place until the platform's planned December closure.
The amount of information exposed appears to differ between users. A Protos journalist was told that the exposed information covered the name printed on the card, the shipping address and the Gnosis Pay account reference.
Notification email describes wider exposure
Screenshots of an email from Gnosis Pay have circulated. Rotki founder Lefteris Karapetsas said the message told him that his breached data included his full home address, name, card number and every wallet address linked to his account.
The Defiant reported the breach, and the wider account of exposed data rests on what affected users have shared publicly.
Legacy system was already due to close
Gnosis Pay had already intended to sunset the affected system at the end of this year, so the breach hit infrastructure the company was in the process of retiring.
Open questions
- How many customers were affected by the breach?
- Which customers saw which categories of data exposed?