Gnosis Pay breach exposes customer information
Key points
- Gnosis Pay disclosed unauthorised access to its branded card system on 3 November 2026, exposing certain customer information.
- The company began containment within two hours, replaced affected security credentials and addressed the vulnerability.
- Customer funds and Gnosis Pay's separate enterprise platform remained unaffected, while mandatory 3D Secure verification now protects online payments.
Gnosis Pay has disclosed a security breach exposing customer information through its branded card system on 3 November 2026.
The breach affected its consumer card business, while its enterprise platform supporting white-label programmes remained unaffected.
“We sincerely apologise,” said Gnosis Pay in its official security announcement.
The security team began containment within two hours, replaced compromised credentials and addressed the vulnerability.
Gnosis Pay introduced mandatory 3D Secure verification for every online card payment following the incident.
The affected consumer card system was already scheduled for retirement on 20 December 2026, according to the company.
Gnosis Pay increased monitoring of card activity and wallets, while arranging specialist monitoring for potential misuse of exposed information.
The incident highlights data security risks facing crypto-linked payment services as providers manage customer information and digital asset access.
Frequently asked questions
More from Crypto
Bank of Russia approves crypto trading for retail investors
US Treasury blocks MEXC over $16 billion flows
Polymarket trader placed $200,000 before poll release
US Treasury sanctions eight Canadian crypto-linked firms
Binance sets year-end account closures across Europe
Greece approves 10% tax on cryptocurrency gains
-640x358.jpg&w=3840&q=75)