Gnosis Pay: unauthorized access on Nov 3 hit the legacy system behind its branded cards; enterprise white-label platform untouched
- Defenses now: stepped-up monitoring of card and wallet activity; 3D Secure mandatory for all online card payments until B2C retirement.
- Customer advice (official): treat unexpected email/SMS/calls about Gnosis Pay, Partner Apps or the card as phishing even if they quote real details; never share seed phrases, private keys, PIN or full card number; account changes only inside the official web app or Partner App.
- Customer notices and secondary reporting (e.g. Protos) indicate some affected users were told that names, shipping/home addresses, card numbers and linked wallet addresses were among the data types accessed — scope varies by account.
Sources: Gnosis Pay: Data breach on the legacy system powering Gnosis Pay-branded cards (Nov 6) · Gnosis Pay on X (Nov 6)