Gnosis Pay Data Breach Exposes Cardholders' Personal Information - KuCoin

The company's security monitoring detected the breach on Nov. 3, with the team containing the incident within two hours. They replaced affected credentials and patched the vulnerability. The intrusion specifically impacted the consumer business that runs Gnosis Pay–branded cards (B2C), while the enterprise platform powering white-label card programs for partners remained unaffected.

Affected customers were notified via email on Nov. 6 with account-specific details about what information was taken. Gnosis Pay did not disclose how many customers were affected or the exact categories of customer data exposed. The company stated it has informed its card issuer, partners, and relevant data protection authorities about the incident.

Customer protections

While funds were not compromised, Gnosis Pay emphasized that protecting personal data remains equally important. The firm is conducting a full review, applying lessons across systems, and arranging specialist monitoring for signs of misuse of the exposed information.

Card activity and wallets are under enhanced monitoring for fraud or unauthorized access. 3D Secure (an extra verification step for online purchases) has been made mandatory for all online card payments. These safeguards will remain in place until the consumer system retires at 23:59 UTC on Dec. 20, 2026.

Service wind-down

Physical and virtual cards will stop authorizing transactions after the Dec. 20 retirement time. The web app will retain withdrawal functionality, and assets remain owned by customers in their self-custodial Safe accounts.

Customers wanting continued card access may opt into partner programs under new terms; moving is optional but existing branded cards will stop working regardless. Cardholders were asked to export transaction histories and update recurring payments.

Community reaction has been mixed, with some users questioning whether an apology was sufficient and calling for the service to be shut down immediately. Others warned the exposed data could fuel phishing or even physical attacks on crypto holders.