Crypto Card Provider Gnosis Pay Says Hackers Accessed Customer Data

In brief

• Gnosis Pay detected unauthorized access on Nov. 3 to the system powering its own branded cards, exposing some customer information. The company says funds weren’t affected.
• The consumer platform, which was already set to retire Dec. 20, now requires extra verification for online payments. Gnosis Pay’s enterprise platform wasn’t affected.
• Gnosis Pay didn’t say how many customers were affected or what data was exposed, and it warned users about phishing and sharing their addresses.

Crypto card provider Gnosis Pay said Friday that hackers accessed customer information through the system behind its own branded cards, the latest in a string of security incidents across the industry.

The company’s monitoring systems detected unauthorized access on Nov. 3, and containment began within two hours, Gnosis Pay said in a blog post. It has since replaced the compromised security credentials and fixed the vulnerability. Customer funds weren’t affected, the company said.

The breach was limited to Gnosis Pay’s consumer business, whose platform was already scheduled for retirement on Dec. 20. Its enterprise platform, which powers white-label card programs for fintech firms, wallets and neobanks, wasn’t affected.