The company, which lets users spend stablecoins with Visa debit cards tied to their crypto wallets, announced Friday (Nov. 6) it had uncovered the breach earlier in the week.
“On 3 November 2026, our monitoring systems detected unauthorized access to the system powering Gnosis Pay-branded cards (our B2C business line), resulting in the exposure of certain customer information,” the company said.
“Our security team responded immediately and containment began within two hours of detection. We subsequently replaced the affected security credentials and addressed the vulnerability.”
Gnosis Pay said the breach was limited to the system powering its branded cards, which was already due for retirement on Dec. 20. The company added that its enterprise platform, which powers all of its white-label card programs, was not impacted.
The company said it has now made 3D Secure verification mandatory for online card payments and stepped up fraud monitoring ahead of the legacy consumer system’s planned shutdown next month. Gnosis Pay also cautioned that scammers could use stolen personal information and purchase histories to make fraudulent messages seem legitimate.
The breach was flagged in a report Saturday (Nov. 7) by CoinDesk, which noted that the incident increases the risk of targeted scams, because cybercriminals could use the stolen data to tie users’ real-world identities with their crypto holdings.
Eleftherios Karapetsas, founder of crypto portfolio tracker Rotki, shared an email received from Gnosis Pay in a post on X. That message said that the stolen data included his name, full home address, card number and every wallet address connected to his account.
“You had already lost me as a user but you could have at least protected my data,” he wrote.
The incident comes in the wake of the largest crypto hack ever recorded, in which cybercriminals stole more than $6 billion from Binance, the world’s largest crypto currency exchange, in late October.
In addition to Binance, Brazil’s Mercado Bitcoin said last week it would absorb a $40 million loss following a hack.
Two other firms, Nubank and Mercado Pago, paused some cryptocurrency operations last week following issues with third-party providers.
Research from PYMNTS Intelligence has found a notable number of cyber incidents resulting from third-party breaches. For example, 38% of fake invoice scams had at their roots compromised vendors or suppliers, along with 43% of phishing incidents.
