Gnosis Pay has confirmed a security incident involving unauthorized access to customer data stored within its legacy payment infrastructure. The crypto debit card provider disclosed that attackers gained access to its legacy debit card system on November 3, compromising sensitive information including card details, personal data, and crypto wallet information The Block.
The company moved to reassure customers that despite the exposure of personal and financial information, customer funds remained secure and unaffected by the breach. According to the disclosure, the intrusion was confined to the legacy systems supporting the provider's branded debit cards, while the enterprise card platform operations continued without compromise Decrypt.
The scope of exposed data encompasses significant categories of sensitive information. Reports indicate that the breach compromised not only traditional card details and personal identifiable information but also data pertaining to users' cryptocurrency wallets Cointelegraph. This dual exposure presents unique risks given the intersection of conventional financial instruments and digital asset storage.
Gnosis Pay has characterized the incident as limited to its legacy infrastructure, distinguishing between the compromised legacy debit card system and its modern enterprise-grade platforms. The company indicated that the enterprise card platform was untouched by the unauthorized access, suggesting a separation between older customer-facing systems and current operational architecture Decrypt.
The timing of the disclosure, occurring three days after the initial intrusion on November 3, follows standard incident response protocols for payment providers. The breach affects a platform designed to bridge traditional banking services with cryptocurrency ecosystems, allowing users to spend digital assets through conventional card networks The Block.
Security analysts note that compromises of legacy systems often present distinct challenges compared to modern blockchain infrastructure. While decentralized networks typically maintain fund security through cryptographic protocols, legacy banking integrations require traditional data security measures that may present different vulnerability profiles. The incident highlights the security complexities faced by crypto-native financial services operating hybrid models that interface with conventional payment rails Cointelegraph.
Users affected by the breach face standard identity theft and financial fraud risks associated with exposed card data, alongside crypto-specific concerns related to wallet information exposure. Although the company confirmed that actual funds remained secure, the combination of compromised personal data and cryptocurrency wallet details creates a comprehensive profile potentially valuable to malicious actors operating across both traditional and digital asset spheres The Block.
The incident serves as a reminder of the security challenges inherent in crypto payment adoption, where bridging mechanisms between blockchain assets and legacy financial infrastructure must maintain robust protections across both domains. Gnosis Pay has not disclosed the specific number of affected customers or technical details regarding the intrusion vector, though the company maintains that its immediate response secured customer assets against monetary loss Decrypt.