Gnosis Pay said hackers accessed customer information through the system powering its own-branded payment cards. According to Decrypt’s report, published November 7, 2026, at 00:41:29 UTC+8, the company disclosed the breach on November 6 and said customer funds were not affected.
The incident concerned its consumer card business, not the enterprise infrastructure it provides to other companies.
What was affected—and what remains unclear
Gnosis Pay said its monitoring systems detected unauthorized access on November 3, and containment began within two hours. The company said it subsequently replaced compromised security credentials and fixed the vulnerability.
The affected consumer platform was already scheduled to be retired on December 20. Gnosis Pay said its enterprise platform—which powers white-label card programs for fintech firms, wallets and neobanks—was not affected.
The company did not publicly specify how many customers were affected or which types of information were exposed. It said each affected customer received an email detailing what had been taken from their account.
“While funds were not affected, the security of personal information is just as important and we take full responsibility,” Gnosis Pay wrote on X.
Measures announced after the breach
Gnosis Pay said it had increased monitoring of card activity and wallets for fraud. It also made 3D Secure, an additional verification step, mandatory for all online card payments until the consumer platform’s retirement.
The company said it had notified its partners, card issuer and data protection authorities, and was arranging specialist monitoring for signs that the exposed information was being misused.
These were the company’s reported response measures; the disclosure did not establish the full extent of the data exposure.
What customers were told to watch for
Gnosis Pay warned customers about unexpected messages concerning their cards, including messages containing genuine personal information or purchase details. It said it would never ask customers for seed phrases, PINs or full card numbers, or instruct them to move funds.
The company also urged caution when sharing home addresses or details of crypto holdings, both online and offline.
Decrypt placed that warning in the context of physical attacks on crypto holders. According to blockchain analytics firm Chainalysis, such attacks—including home invasions and kidnappings—were on pace for a record year after more than $30 million was stolen in the first half of 2026.
Wider security context
The report also cited other crypto security incidents: a reported record-setting $6.4 billion hack of Binance; Coinbase’s statement the previous week that a breach at analytics vendor Amplitude exposed some customer contact data; and Ledger’s statement the previous month that all confirmed cases in a suspected $87 million drain involved devices purchased from Southeast Asian reseller CryptoBilis. Ledger urged recent buyers from that reseller to move their funds to new devices.
For Gnosis Pay customers, the key distinction in the disclosure was between exposed personal information and funds the company said were unaffected, alongside the separation between its affected consumer card system and its reportedly unaffected enterprise platform.
Source: Decrypt’s original article, published November 7, 2026, at 00:41:29 UTC+8.