Gnosis Pay separates exposed customer data from unaffected funds
Its disclosure concerns the legacy consumer-card system and adds mandatory online-payment verification.
Gnosis Pay says unauthorized access to its legacy consumer-card system exposed customer information. It detected the incident on November 3 and says funds and its enterprise platform were unaffected. Mandatory 3D Secure checks apply to online payments until the planned December 20 retirement of the consumer system.
For payments builders, the lesson is that protecting balances and protecting personal information are separate responsibilities. A wallet can preserve funds while another system exposes information that makes impersonation more convincing.
The company advises customers to open the official app directly when checking unexpected messages. Product teams should review the data held by each service and make incident communications specific about the affected system, rather than treating an unaffected balance as a complete security outcome.