The UK fintech project Gnosis Pay has officially confirmed that data of its retail Visa debit card holders was compromised. The breach occurred on November 3, continuing a trend this fall: attackers no longer need to specifically target blockchains or smart contracts, but are instead more easily exploiting traditional fiat infrastructure that connects digital assets to the real world.
For institutional partners and investors, the company stated that its enterprise and white-label B2B platforms are operating normally. For general users, the key point is that their crypto assets in wallets remain secure, and the company confirmed that funds were also unaffected. Monavate Limited, the card issuer regulated by the UK Financial Conduct Authority, continues to operate as well. The hacker took only data.
This unauthorized access involved an outdated B2C card processing system. The Gnosis Pay platform was already scheduled for decommissioning and was set to be fully shut down on December 20. According to the official statement, following the attack, the Gnosis Pay security team acted swiftly, containing the threat within two hours and revoking access to the compromised key.
Your crypto assets are secure, but the data has been lost. What happens next?
Gnosis Pay has emailed affected users with a detailed list of the compromised data. Until the system is taken offline next month, the company will operate in emergency mode, with enhanced transaction monitoring and all online payments now requiring 3D Secure verification.
The company has also issued an emergency phishing alert. After obtaining purchase details, addresses, and personal data, scammers have begun impersonating official customer support. The Gnosis Pay team urges users to remain vigilant toward all communications and reminds users, “Neither we nor our partnered apps will ever ask you for your seed phrase, private key, PIN, or full card number to verify or cancel a transaction.” Finally, any account changes are only valid if made directly by the user within the official app.