Gnosis Pay Makes 3D Secure Mandatory After Card Data Breach

Gnosis Pay has made 3D Secure mandatory for online card payments after unauthorized access to its legacy card system exposed full card numbers and CVVs.

Gnosis Pay discovered the unauthorized access Nov. 3 and began responding within two hours. Exposed records included card expiration dates, cardholder names and home addresses, along with linked wallet addresses, email addresses, phone numbers and nationalities. Some users also had IBAN and BIC bank details exposed.

Gnosis Pay replaced credentials associated with the affected system. Customer funds and Gnosis Pay’s enterprise platform were not affected. It has not disclosed how many users were affected.

All online card payments now require 3D Secure. The requirement is scheduled to remain in place until the legacy consumer card system is taken offline Dec. 20.