Gnosis Pay, a cryptocurrency-related Visa debit card provider, disclosed a security breach on Friday that resulted in the exposure of customers' payment card information, home addresses, and cryptocurrency wallet addresses.
Gnosis Pay stated that on November 3, it discovered unauthorized access to its legacy consumer card system and began containing the breach within two hours. The company confirmed that customer funds and its independent enterprise platform, which supports white-label card programs, were not affected.
According to a leaked notice reviewed by Cointelegraph, the company confirmed that the compromised information includes full payment card numbers, expiration dates, CVV codes, customer names, home addresses, and wallet addresses associated with the affected accounts. The leaked data also includes email addresses, phone numbers, nationality, and, in some cases, banking information such as IBAN and BIC.
One of the notices also confirmed that the client's card was canceled on November 3, and no suspicious transactions or fund transfers were detected.
Gnosis Pay stated that the company has replaced the compromised security credentials, patched the vulnerability, and mandated 3D Secure verification for online payments before the old system is retired on December 20. The company also warned customers to be vigilant against phishing attacks exploiting their personal or transaction details and said it is implementing monitoring to prevent misuse of the stolen data.
According to data from the third-party platform OpenRate, which tracks crypto card activity, Gnosis Pay has approximately 2,400 daily active cardholders and processed $263,200 in transactions over the past 24 hours.
The company did not disclose how many customers were affected and did not immediately respond to Cointelegraph's request for comment.