Gnosis Pay detected unauthorized access to its B2C consumer card system on November 3, resulting in the leak of some customer information. The company confirmed that user funds were not affected and the enterprise platform supporting white-label card programs remained untouched. The team began remediation within two hours of detection, replacing compromised security credentials and patching the vulnerability. Gnosis Pay has notified all affected users via email with details on what data was exposed and made 3D Secure verification mandatory for all online card payments. These security measures will remain active until the B2C system is decommissioned on December 20. Users are advised to watch for phishing attempts and never disclose seed phrases, private keys, PINs, or full card numbers.