CONFIRMED: Gnosis Pay disclosed unauthorized access and customer-information exposure. It said funds were unaffected.
No coins lost is good news. It is not the same as no harm done. Gnosis Pay said unauthorized access to the legacy system behind its branded consumer cards exposed certain customer information on November 3. Its November 6 disclosure said funds were not affected and its separate enterprise platform was untouched. Decrypt independently covered that account.
The company said containment began within two hours of detection, compromised credentials were replaced and the vulnerability was addressed. It also made 3D Secure mandatory for online card payments and increased monitoring. Those are the company’s reported response measures; this article is not an independent penetration test certifying that every risk has disappeared.
A real detail makes a fake message convincing
Gnosis Pay warned affected customers to distrust unexpected messages even when they include genuine personal information or a real purchase. That is the part worth reading twice. Stolen context can make a phishing attempt feel less like spam and more like an urgent support interaction. A familiar transaction detail is not proof that the person contacting you works for the card provider.
The primary disclosure does not enumerate every exposed field or give a total number of affected customers. Decrypt also noted those omissions. Other summaries have circulated more specific claims, but we are not importing them into the confirmed fact set without equally strong documentation. The company says affected users received individualized emails explaining what information was taken from their accounts.
Its advice is practical: open the official application directly rather than following an unexpected link, and never hand over a seed phrase, private key, PIN or complete card number. Requests to move funds are another obvious stop sign. The consumer system was already scheduled to retire on December 20, but a retirement date does not retire information already copied. The whisper to reject is that safe balances make a data breach a non-event. Financial loss and exposure of personal information are different risks. Customers deserve clarity about both.
Source: Gnosis Pay. Also checked: Decrypt.
Also reported by: Decrypt
