Gnosis Pay customer data breach involves full card numbers and CVV, forcing online payments to enable 3D verification

Odaily Planet Daily News: Gnosis Pay's customer data breach notification reveals that the incident involved complete payment card numbers, expiration dates, CVV codes, names, addresses, associated wallet addresses, email addresses, phone numbers, and nationalities. Some users' bank information, including IBAN and BIC details, was also exposed. Gnosis Pay's official blog stated that they discovered unauthorized access to the legacy consumer card system on November 3 and began mitigation within two hours. User funds and the enterprise-level platform were unaffected; relevant credentials have been replaced, and all online card payments now require 3D Secure verification, a measure that will remain in place until the system is decommissioned on December 20. Gnosis Pay did not disclose the number of affected users.