Key facts
- Gnosis Pay said the breach affected only infrastructure supporting Gnosis Pay-branded cards, not its enterprise white-label platform.
- Gnosis Pay did not say how many customers were affected or what data was exposed, but said it notified those impacted.
- Gnosis Pay made 3D Secure mandatory for online card payments until the consumer platform is retired on December 20, 2026.
- Gnosis Pay said it contacted its card issuer, partners and data protection authorities and is arranging specialist monitoring.
- Gnosis Pay said the December 20 shutdown of the consumer card system was planned before the incident.
Crypto card provider Gnosis Pay said on November 6, 2026 that hackers accessed customer information through the system behind its own branded cards. The company said its monitoring systems detected unauthorized access on November 3, and that containment began within two hours.
Gnosis Pay said it has since replaced the affected security credentials and fixed the vulnerability. Customer funds were not affected, the company said. It did not say how many customers were affected or what data was exposed, but said it notified each impacted customer with details of what was taken from their account.