Unauthorized Access to Gnosis Pay's Old Card System Leads to Customer Data Breach

Card numbers and wallet addresses leaked, no impact on customer funds

Gnosis Pay, which provides debit cards related to cryptocurrencies, announced on Friday, November 6, 2026, that customer information was leaked due to unauthorized access to its consumer card system.

Card numbers, expiration dates, CVV codes, and personal information were compromised. According to Gnosis Pay, there was no impact on customer funds or the corporate platform. The company stated that its monitoring system detected the unauthorized access on November 3 and containment measures were initiated within two hours. Subsequently, compromised security credentials were exchanged and exploited vulnerabilities were patched.

This breach is limited to the existing consumer card system supporting Gnosis Pay-branded cards. The corporate platform providing white-label card programs for fintech companies, wallets, and neobanks was not affected.

Customer notifications confirmed by Cointelegraph revealed that card numbers, expiration dates, CVV codes, names, home addresses, and cryptocurrency wallet addresses were leaked. Additionally, email addresses, phone numbers, nationalities, and in some cases, banking information such as IBAN and BIC were also included.

We had a data breach affecting the system powering Gnosis Pay-branded cards (our B2C business line) that resulted in the exposure of certain customer information. Everyone affected was sent an email today with full information. We deeply regret that this happened. While funds were not affected, the security of personal information is just as important and we take full responsibility. Additional measures are in place until the B2C platform involved is fully retired as planned on 20 December 2026. In the meantime we encourage everyone to be even more vigilant. We will never ask for your PIN or seed phrase, or ask you to move funds. Further Details: https://t.co/rZoZ4hbqan We encourage security researchers to communicate security vulnerabilities directly with us via bounty@gnosis.io. The same rewards apply as to Gnosis Chain: https://t.co/t8EnMI0fyF

--- Gnosis Pay 💳 (@gnosispay) November 6, 2026

Mandatory 3D Secure and Enhanced Monitoring Until Old System is Retired

Gnosis Pay has strengthened monitoring of card transactions and connected wallets to prevent the misuse of leaked information and fraudulent transactions. Furthermore, it has mandated additional authentication through 3D Secure for all online card payments, raising security measures.

These measures are expected to continue until the consumer card system is retired on December 20. The termination of the system was already planned prior to this incident and will not affect corporate services or white-label card programs. The company has reported the situation to partner companies, card issuers, and relevant data protection authorities, employing experts to monitor the misuse of leaked information.

Meanwhile, customers are also urged to be vigilant against phishing scams that exploit their information. They are advised to be cautious of suspicious messages containing actual personal information, such as names and purchase histories, and it was explicitly stated that they will never ask for seed phrases, PINs, or the full card number, nor request fund transfers.

While no direct harm to customer funds has been confirmed, the leak of payment information and cryptocurrency wallet addresses in this incident underscores the importance of ongoing monitoring to prevent the misuse of stolen information.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.