Gnosis Pay data breach: card customer data exposed - CryptoTicker.io
Gnosis Pay confirmed on November 6, 2026 that attackers accessed the system behind its crypto debit cards and exposed customer data. Funds are not affected, but cardholders now face phishing with genuine data and must find a new card by December 20.
The incident comes at an awkward moment for Gnosis Pay, which is already shutting down its consumer business on December 20, 2026. Cardholders now face two simultaneous challenges: protecting themselves from potential fraud while finding alternative payment solutions before their current cards become obsolete.
According to Gnosis Pay's statement, the company's monitoring systems detected unauthorized access on November 3, 2026, to the system that runs its B2C business—retail customer operations. The security team responded within two hours, containing the breach and rotating affected security credentials.
Scope of the breach
Only the legacy system for Gnosis Pay's own-branded cards was compromised. The company's enterprise platform, which provides card programs for other providers as white-label solutions, remained unaffected. This distinction is crucial for customers using cards through partner applications.
Gnosis Pay has not disclosed how many customers were affected or what specific data types were taken. The company informed all impacted individuals via email on November 6, detailing exactly which information was compromised from each account.
Self-custody model protects funds
Gnosis Pay operates as a self-custodial Visa card provider, meaning customer funds remain in blockchain accounts controlled solely by the users. This architecture explains why the breach didn't compromise actual funds, though it exposed the valuable link between personal identities and public wallet addresses.
Anyone who breaks into the card operator's customer system does not thereby hold the keys to the accounts on the blockchain.
Heightened phishing risks
The most significant danger following the breach is sophisticated phishing attempts using genuine customer data. Fraudsters can now craft convincing messages containing real personal information, making traditional warning signs less reliable.
Gnosis Pay has implemented technical safeguards by making 3D Secure mandatory for all online payments until the service shuts down. This additional verification step prevents unauthorized online transactions using only card details.
Customer protection measures
The company advises customers to carefully review their breach notification emails but avoid clicking any links within them. Gnosis Pay emphasizes that it will never request seed phrases, private keys, PINs, or full card numbers via email or text message.
Customers should only access official Gnosis Pay applications through bookmarks or direct URLs, never through links in communications. The company has also increased monitoring of card activity and wallet transactions to detect and prevent fraudulent attempts.
Related
