Gnosis Pay Data Breach: User Names, Addresses, and Wallet Addresses Exposed

TechFlow news, Nov. 8, according to Bitcoin.com News, crypto payment service provider Gnosis Pay confirmed a data breach: on Nov. 3, its monitoring systems detected unauthorized access to the Gnosis Pay branded card (B2C business line) system, disclosed externally on Nov. 6, and initiated remediation within two hours of detection. Affected credentials have been replaced and the vulnerability fixed. The company said the breach was limited to the B2C card system, which is scheduled to be retired on Dec. 20. The enterprise-grade platform supporting all white-label card projects was unaffected, and customer funds remain safe. However, it did not disclose the number of affected users or provide a complete list of compromised fields, notifying affected cardholders individually. Rotki founder Lefteris Karapetsas said his name, home address, card number, and all crypto wallet addresses associated with his account were leaked, and publicly expressed dissatisfaction. The report noted that the combination of names, addresses, and traceable on-chain addresses could be used for targeted phishing, impersonation, or even physical threats, but there is currently no evidence that the leaked data has been exploited.

Source: TechFlow