Gnosis Pay Detects Data Breach in Legacy Card System

Overview

• Gnosis Pay said it detected unauthorized access to the system behind its branded consumer cards on Nov. 3, 2026, and began containment within two hours.
• The firm told affected customers on Nov. 6 and reported the incident to its card issuer and data protection authorities, but it has not disclosed how many users were impacted or the full categories of data exposed.
• Gnosis Pay replaced compromised credentials, fixed the vulnerability, increased fraud monitoring for cards and wallets, and mandated 3D Secure for all online card payments until the December shutdown.
• Some coverage reports that exposed fields include full card details, CVV codes, home addresses and linked crypto wallet addresses, and customers have been warned to expect targeted phishing or physical‑targeting risks.
• The breach is limited to the legacy B2C card platform that is due to retire on Dec. 20, 2026, the company says customer funds and its enterprise white‑label card platform were not affected, and the incident follows a run of security problems in the crypto payments sector this year.