Gnosis Pay data breach exposes customer card and wallet details

Gnosis Pay detected a security breach on November 3, 2026, exposing personal customer data, payment card details, and linked wallet addresses across its legacy consumer card system. While customer funds and B2B enterprise services were unimpacted, exposed records included home addresses and CVVs, prompting urgent warnings regarding targeted phishing and physical theft risks ahead of the consumer platform's scheduled December 20 shutdown.

Gnosis Pay consumer card breach

• ▪Gnosis Pay detected unauthorized access to the legacy processing system powering Gnosis Pay-branded consumer debit cards
• ▪Gnosis Pay had previously scheduled the complete shutdown of its consumer card platform for December 20, 2026
• ▪Gnosis Pay announced that customer funds and its enterprise white-label card platform were unaffected by the November 3, 2026 data breach

Exposed customer data scope

• ▪Breach notifications sent by Gnosis Pay revealed that exposed data included customer names, home addresses, phone numbers, email addresses, card numbers, expiration dates, CVVs, IBANs, and linked crypto wallet addresses
• ▪Rotki founder Lefteris Karapetsas stated that his full home address, name, debit card number, and all linked cryptocurrency wallet addresses were exposed in the Gnosis Pay breach detected on November 3, 2026

Security containment response

• ▪Gnosis Pay made 3D Secure verification mandatory for all online debit card payments
• ▪Gnosis Pay contained a data breach by revoking compromised API credentials and addressing a vulnerability in its legacy card processing system
• ▪Gnosis Pay reported the data breach to partner apps, its card issuer, and relevant data protection authorities while warning users of targeted phishing attempts

Crypto card breach pattern

• ▪In August 2026, an exploit targeting Rain's Solana card infrastructure allowed unauthorized withdrawals from card balances linked to Tria and Avici users
• ▪In October 2026, card issuer Based reported an unauthorized intrusion into an internal administrative dashboard used for its Visa card program
• ▪Chainalysis reported that physical wrench attacks and violent targeted thefts against cryptocurrency holders accounted for over $30 million in stolen assets by mid-2026