Gnosis Pay Confirms Consumer-Card Data Breach, Says Funds Unaffected
Crypto card provider Gnosis Pay said hackers accessed customer information in the system behind its consumer cards, with monitoring detecting the intrusion on Nov. 3. The company says customer funds and its enterprise platform were not affected, but has not disclosed how many customers were impacted.
Written by CoinArticle’s AI Newsroom · from 2 cited sources. How we work
What Gnosis Pay Disclosed
Gnosis Pay said hackers accessed customer information through the system behind its consumer-branded cards, according to a blog post the company published on Friday. Its monitoring systems detected unauthorized access on Nov. 3, and containment began within two hours. The company says it has since replaced the compromised credentials and fixed the vulnerability.
The company states that customer funds were not affected. The breach was limited to its consumer business, which was already scheduled for retirement on Dec. 20. Its enterprise platform, which powers white-label card programs for fintech firms, wallets and neobanks, was not affected, the company said.
Scope Remains Undisclosed
Gnosis Pay has not said how many customers were affected or what specific data was exposed. The company said it emailed each affected customer with details of what was taken from their account. Its public statement on X said, "While funds were not affected, the security of personal information is just as important and we take full responsibility."
The two sources differ on how the company framed the scope of the disclosure. The Defiant characterized the company as confirming a breach of its consumer-card system while withholding customer counts. Decrypt reported the same core facts and added that the company described the exposed information only as "certain customer information" in its statement. Neither outlet reported an independent figure for affected users, and no third-party estimate has been published.
Response and Customer Guidance
Gnosis Pay said it has increased monitoring of card activity and wallets for fraud. It has made 3D Secure, an extra verification step, mandatory for all online card payments until the consumer platform is retired. The company said it has reported the breach to its partners, its card issuer and data protection authorities, and is arranging specialist monitoring for signs the data is being misused.
The company told customers to be wary of unexpected messages about their cards, including messages that contain accurate personal details. It said it will never ask for seed phrases, PINs or full card numbers, or ask users to move funds.
Broader Security Context
The disclosure comes amid a series of recent security incidents across the industry. Decrypt cited blockchain analytics firm Chainalysis, which reported that physical "wrench attacks" on crypto holders were on pace for a record year after more than $30 million was stolen this way in the first half of 2026. Decrypt also referenced a $6.4 billion hack of Binance, a Coinbase disclosure that a breach at analytics vendor Amplitude exposed some customer contact data, and a suspected $87 million drain of Ledger hardware wallets. Ledger said all confirmed cases involved devices bought from CryptoBilis, a Southeast Asian reseller. These incidents were reported separately from the Gnosis Pay disclosure and are not confirmed to share a cause.
Why It Matters
For Traders
Gnosis Pay's consumer card holders should expect elevated fraud screening and 3D Secure prompts, and the scope of the exposure remains unconfirmed.
For Investors
The incident adds to a pattern of custodial and vendor-side data breaches that raises the regulatory and reputational cost of consumer crypto products.
For Builders
Teams relying on white-label card infrastructure should review how credential and data handling is segmented between consumer and enterprise platforms.
This article is for information only and is not financial advice. Read the full disclaimer.
