Gnosis Pay Data Breach Exposes Customer Card and Wallet Details on Legacy System

Gnosis Pay disclosed a data breach on November 6, 2026, after its monitoring systems detected unauthorized access to the legacy platform that powers its branded consumer debit cards on November 3. The company began containment measures within two hours, replaced compromised credentials, and patched the vulnerability. Customer funds and wallet balances remained untouched.

Gnosis Pay Data Breach Details on Legacy Platform

The breach remained confined to the consumer debit card platform, which Gnosis Pay had already scheduled for retirement on December 20, 2026. The separate enterprise and white-label platform experienced no exposure. Affected data included names, residential addresses, card numbers with expiration dates and CVV codes, linked wallet addresses, email addresses, phone numbers, and nationality information. In some cases, IBAN and BIC details were also exposed.

Notifications sent to customers listed the specific fields tied to each account. No figure for the total number of affected customers has been released. The company stated that the incident did not involve movement of funds or wallets and reported the event to its card issuer Monavate, relevant partners, and data protection authorities.

Following the discovery, Gnosis Pay made 3D Secure authentication mandatory for all online card transactions and increased monitoring of card activity and linked wallets through the December 20 retirement date. The firm is also arranging specialist monitoring services for potential misuse of the exposed information and issued guidance on recognizing phishing attempts.

Company Response and Customer Protections

Gnosis Pay contacted every affected customer directly by email on November 6 with personalized details of the exposed data. The disclosure came via an official blog post and statements on X. The company emphasized that the legacy system had been slated for decommissioning and that the enterprise platform used by partners remained isolated from the incident.

Containment actions included immediate rotation of security credentials and remediation of the exploited vulnerability. Gnosis Pay continues to monitor for signs of data misuse and maintains direct communication channels with regulators. Customers were advised to watch for unusual activity on linked accounts and to treat unsolicited messages with caution.

The incident follows a separate wallet exploit in June 2026 that resulted in approximately $1.5 million in losses, later restored by the company. Gnosis Pay stated the two events are unrelated. No evidence has surfaced linking the November access to broader network compromise.

Next Steps After Gnosis Pay November 2026 Disclosure

The consumer platform will be retired on December 20, 2026, ending support for the affected debit cards. Gnosis Pay has directed remaining users to alternative solutions ahead of the shutdown. The company continues to coordinate with authorities and security specialists while maintaining standard operations on its unaffected platforms.

Customers retain access to existing balances and can continue using cards until the retirement date under the new 3D Secure requirements. Gnosis Pay has not indicated plans to extend monitoring services beyond the decommissioning period.