Gnosis Pay said on November 6, 2026, that hackers had accessed customer information through the system powering its branded consumer cards. According to the company, customer funds were not affected, and its enterprise platform remained outside the breach.
The disclosure leaves the scale of the incident unclear: Gnosis Pay did not publicly specify how many customers were affected or which categories of information were exposed. It said each affected customer received an email explaining what had been taken from their account.
Breach limited to a platform already scheduled to close
According to Gnosis Pay’s account, its monitoring systems detected unauthorized access on November 3, and containment began within two hours. The company said it subsequently replaced compromised security credentials and fixed the vulnerability.
The affected consumer platform was already scheduled for retirement on December 20. Gnosis Pay said its enterprise platform—which powers white-label card programs for fintech firms, wallets and neobanks—was not affected.
“While funds were not affected, the security of personal information is just as important and we take full responsibility,” the company wrote on X.
Additional checks and warnings for customers
Gnosis Pay said it had increased monitoring of card and wallet activity for fraud. It also made 3D Secure, an additional verification step, mandatory for all online card payments until the consumer platform is retired.
The company said it notified partners, its card issuer and data protection authorities, and was arranging specialist monitoring for signs of misuse of the exposed information.
Customers were warned to treat unexpected card-related messages cautiously, even when those messages include genuine personal information or purchase details. Gnosis Pay said it would never ask for seed phrases, PINs or full card numbers, or instruct customers to move funds. It also cautioned customers about sharing their addresses or details of their crypto holdings, online or offline.
Data exposure carries risks beyond account balances
The distinction between unaffected funds and exposed personal information matters for crypto payment users: the company’s warnings address potential misuse of customer details even where no funds were taken in the breach.
The original report placed the incident alongside broader security concerns. According to blockchain analytics firm Chainalysis, physical “wrench attacks” on crypto holders, including home invasions and kidnappings, were on pace for a record year after more than $30 million was stolen in the first half of 2026.
Decrypt also cited a record-setting $6.4 billion hack of Binance; Coinbase’s statement the preceding week that a breach at analytics vendor Amplitude exposed some customer contact data; and Ledger’s statement the preceding month that all confirmed cases in a suspected $87 million drain involved devices purchased from Southeast Asian reseller CryptoBilis. Ledger urged recent buyers to move funds to new devices.
For Gnosis Pay, the disclosed information establishes a consumer-platform data breach, not a measure of adoption or customer retention. Without an affected-customer count or a public breakdown of the exposed data, its reach cannot be quantified from the report.
Original report: Decrypt, published November 7, 2026, at 00:41:29 UTC+08:00. The company’s disclosure was dated November 6, 2026.