Gnosis Pay discloses customer data breach in legacy card system

Crypto payments platform Gnosis Pay disclosed on November 6, 2026 a customer data breach: its monitoring detected unauthorized access on November 3 to the legacy system behind Gnosis Pay-branded cards. The company says customer funds were not affected.

Details

In its official statement, Gnosis Pay says the breach was limited to the legacy B2C platform. Its enterprise platform, which powers white-label card programs, was not affected. The exposed data varies by customer: every affected user was emailed a description of what was exposed, along with individual recommendations. The number of affected users was not disclosed.

Cointelegraph reports that the exposed information includes card details, names, addresses, contact details and crypto wallet addresses. Gnosis Pay's own statement does not list the data types, so treat that breakdown as the outlet's reporting, not the company's.

Gnosis Pay says it replaced credentials and patched the vulnerability within two hours of detection. 3D Secure verification is now mandatory for all online payments, and card and wallet monitoring is stepped up through December 20, 2026. Data protection authorities and partners have been notified. Affected users are urged to watch for phishing and can contact help@gnosispay.com.

What this means for the market

The legacy system was already scheduled to shut down on December 20, 2026, when the B2C service ends. No direct financial losses have been reported, but exposed personal data and wallet addresses raise the risk of targeted phishing and social engineering against cardholders.

For crypto card users it is a reminder that wallet security does not protect data held by the card issuer. This is not investment advice. Live market data is in the daily brief.