Gnosis Pay disclosed on 6 November that unauthorised access to the legacy system behind its branded cards exposed customer information. Its breach notice is short enough to read in four minutes, and almost every line in it is a number with a date attached: detection on 3 November, containment inside two hours, disclosure three days later, retirement of the affected platform on 20 December.