Gnosis Pay Reports Data Breach Linked to Recent Hack of Customer Info

Gnosis Pay Security Breach

In a troubling development for the cryptocurrency sector, Gnosis Pay, a provider of crypto card services, confirmed on Friday that hackers gained unauthorized access to customer information linked to its own branded payment cards. This incident marks yet another breach in a series of security challenges facing the digital currency industry.

Incident Details

The company became aware of the unauthorized access on November 3, triggering a containment process that was initiated within two hours. According to Gnosis Pay’s blog, the compromised security credentials have since been replaced, and the vulnerability has been addressed. Importantly, the company asserted that customer funds remained secure and unaffected by this breach.

The breach specifically targeted Gnosis Pay's consumer service, which is set for deactivation on December 20. Notably, its enterprise services, used by fintech firms and neobanks to run white-label card programs, did not suffer from this incident.

Customer Communication and Response

While Gnosis Pay did not disclose the specific number of customers affected or the precise nature of the exposed information, they have reached out via email to provide relevant details to those impacted. The company expressed concern for the potential risks associated with compromised personal information, acknowledging their responsibility for the incident. In a statement shared on social media platform X, Gnosis Pay emphasized:

"Even though funds were untouched, we recognize the critical importance of securing personal data."

In response to this security breach, Gnosis Pay has heightened monitoring of card activities and wallets to prevent fraudulent transactions. Furthermore, they have implemented mandatory 3D Secure verification for all online card payments until the consumer service is phased out. The company has also notified its partners, card issuers, and data protection regulators about the incident and is arranging expert monitoring for any misuse of the compromised data.

Customer Advisory

Gnosis Pay advised its customers to be cautious of unsolicited communications regarding their accounts, specifically warning that it will never request sensitive information such as seed phrases, PINs, or complete card numbers, nor will it instruct users to transfer funds. Customers are cautioned to be prudent when sharing details related to their addresses or cryptocurrency assets, both in digital and physical spaces.

Broader Context of Security Risks

This guidance comes amid growing concerns over safety with cryptocurrency holders facing increased risks of "wrench attacks", which encompass home invasions and abductions aimed at stealing digital assets. According to Chainalysis, over $30 million was reported stolen through such tactics in the first half of 2026, indicating a potential surge in these violent crimes.

The announcement by Gnosis Pay follows other significant breaches within the crypto domain, including a record $6.4 billion hack affecting cryptocurrency exchange Binance and a recent incident at analytics provider Amplitude that compromised customer contact data at rival firm Coinbase. Additionally, hardware wallet manufacturer Ledger reported last month that a significant breach linked to an $87 million theft involved devices purchased from a specific Southeast Asian reseller, advising users to secure their assets by transferring them to new wallets.