Gnosis Pay data breach: Your money is safe, so why stay alert?
The money on your crypto debit card is still there. So why is the official team telling you to be cautious about an email containing real information?
On November 6, the Gnosis Pay official blog said that monitoring detected unauthorized access on November 3 to an old system that powers “Gnosis Pay branded cards” (its B2C service for individual users), exposing some customer information. The team began responding within two hours of discovering the breach, then replaced the affected credentials and fixed the vulnerability. The official statement says funds were not affected, and the platform that issues white-label cards for businesses was not impacted. This legacy system was already scheduled to be shut down on December 20.
The team has emailed every affected customer to explain exactly what information was exposed, but has not disclosed how many people were affected or published a definitive list of exposed data fields. According to media reports, a notification shared by one user included their name, home address, card number, and linked wallet address. Check the official email you received for your own details—don’t assume a forwarded screenshot tells the whole story.
Online card payments now require 3D Secure until the legacy system is shut down as planned on December 20.
My take: the fact that your money wasn’t stolen doesn’t mean there’s nothing to worry about. Once personal information is exposed, the more likely follow-up is a phishing email or text that looks “very real.” The official team advises staying alert to any unexpected emails, texts, phone calls, or letters. Even if they contain your real information or refer to a real purchase, don’t click links; go directly to the official website or use the partner app. Neither the official team nor partner apps will ask you for your seed phrase, private key, PIN, or full card number, or ask you to transfer funds by email, text, or phone.
#数据泄露 #防骗 #加密卡 #Security
The money on your crypto debit card is still there. So why is the official team telling you to be cautious about an email containing real information?
On November 6, the Gnosis Pay official blog said that monitoring detected unauthorized access on November 3 to an old system that powers “Gnosis Pay branded cards” (its B2C service for individual users), exposing some customer information. The team began responding within two hours of discovering the breach, then replaced the affected credentials and fixed the vulnerability. The official statement says funds were not affected, and the platform that issues white-label cards for businesses was not impacted. This legacy system was already scheduled to be shut down on December 20.
The team has emailed every affected customer to explain exactly what information was exposed, but has not disclosed how many people were affected or published a definitive list of exposed data fields. According to media reports, a notification shared by one user included their name, home address, card number, and linked wallet address. Check the official email you received for your own details—don’t assume a forwarded screenshot tells the whole story.
Online card payments now require 3D Secure until the legacy system is shut down as planned on December 20.
My take: the fact that your money wasn’t stolen doesn’t mean there’s nothing to worry about. Once personal information is exposed, the more likely follow-up is a phishing email or text that looks “very real.” The official team advises staying alert to any unexpected emails, texts, phone calls, or letters. Even if they contain your real information or refer to a real purchase, don’t click links; go directly to the official website or use the partner app. Neither the official team nor partner apps will ask you for your seed phrase, private key, PIN, or full card number, or ask you to transfer funds by email, text, or phone.
#数据泄露 #防骗 #加密卡 #Security
