Gnosis Pay discloses customer data breach ahead of Dec. 20 closure

Gnosis Pay disclosed a customer data breach on Nov. 6 affecting the legacy system behind its branded payment cards, saying funds were unaffected and extra security checks would remain in place until the platform’s planned December closure. Summary Unauthorized access was detected Nov. 3, with containment beginning within two hours, according to Gnosis Pay. Affected customers received individual emails explaining what information had been taken from their accounts. Mandatory 3D Secure checks now apply to all online card payments until the consumer system closes. Users questioned the company’s response and raised concerns about phishing following the exposure of personal information. According to Gnosis Pay’s disclosure, the intrusion affected its consumer business, which operates Gnosis Pay-branded cards. Its enterprise platform, used to power white-label card programs for other businesses, was not affected. The company said its security team responded immediately after monitoring systems detected unauthorized access on Nov. 3. Containment began within two hours, followed by the replacement of affected security credentials and a fix for the vulnerability. We had a data breach affect...