Gnosis Pay Breach Exposes User Data As Legacy Processing Systems Fall
Key Summary
Gnosis Pay confirmed that attackers accessed personal data belonging to retail Visa debit cardholders through a legacy B2C card processing system on November 3. Enterprise platforms and direct wallet funds remain unaffected. Card issuer Monavate Limited continues standard operations, while the platform maintains an emergency operational posture ahead of its scheduled December 20 retirement.
Key Bullets
- Gnosis Pay confirmed a breach of retail Visa debit cardholder data originating from a legacy B2C processing system.
- Card issuer Monavate Limited operating under UK Financial Conduct Authority regulation reports normal daily processing functions.
- Security teams isolated compromised keys within two hours of detection and initiated mandatory 3D Secure verification.
- Scammers are targeting exposed users with phishing attempts while Gnosis Pay prepares for a total platform shutdown on December 20.
Legacy Card Processing System Compromised
Gnosis Pay confirmed that attackers exfiltrated user data belonging to holders of its retail Visa debit cards on November 3. The breach targeted a legacy B2C card processing system rather than underlying blockchain networks or smart contracts. According to official disclosures, the unauthorized access exposed customer names, physical addresses, and purchase histories.
Enterprise and white-label B2B infrastructure remain isolated from the incident. Institutional partners experienced no disruptions to commercial operations. Funds held within self-custody wallets connected to the platform were not accessed by the intruders. Card issuer Monavate Limited, regulated directly by the UK Financial Conduct Authority, continues processing transactions normally across its separate infrastructure.
Emergency Mitigations Precede Scheduled Shutdown
Internal security teams disabled the compromised access keys within two hours of detecting the unauthorized intrusion. Gnosis Pay was already executing a planned wind-down of the retail card product before the incident occurred. A full platform shutdown remains scheduled for December 20.
Until the final decommissioning date, the platform operates under heightened security protocols. Transaction monitoring thresholds have been elevated across remaining card operations. Mandatory 3D Secure verification is now required for all online card payments.
Phishing Warnings Issued To Affected Users
Gnosis Pay finished dispatching individual email notifications to all verified victims detailing the exact fields compromised. Scammers have already begun utilizing the stolen purchase details and personal identifiers to impersonate official customer support desks across messaging channels. The company advises cardholders to reject any inbound communications requesting private keys, seed phrases, PINs, or full card numbers. All genuine profile modifications must be executed exclusively inside the official application interface.
About CryptoNewsFree Market Intelligence Wire
The CryptoNewsFree Market Intelligence Wire provides rapid, objective coverage of breaking crypto developments, regulatory actions, and market liquidity trends. Our reporting strictly follows our Editorial & Verification Standards.