Gnosis Pay said Friday that hackers accessed customer information through the system behind its own branded cards, marking another security incident in the crypto industry. The company’s monitoring systems detected unauthorized access on November 3, and containment began within two hours, according to a blog post. Gnosis Pay has since replaced compromised security credentials and fixed the vulnerability.
The breach was limited to Gnosis Pay’s consumer business, which was already scheduled for retirement on December 20. Its enterprise platform, which powers white-label card programs for fintech firms, wallets and neobanks, was not affected. Gnosis Pay said customer funds were not affected, but it did not say how many customers were impacted or what data was exposed. The company said it emailed each affected customer with details of what was taken from their account.
“While funds were not affected, the security of personal information is just as important and we take full responsibility,” the company wrote on X. Gnosis Pay said it has increased monitoring of card activity and wallets for fraud, and has made 3D Secure, an extra verification step, mandatory for all online card payments until the consumer platform is retired. It has reported the breach to partners, its card issuer and data protection authorities, and is arranging specialist monitoring for signs that the data is misused.
Gnosis Pay warned customers to be wary of unexpected messages about their cards, even ones that include real personal details or purchases. It said it will never ask for seed phrases, PINs or full card numbers, or ask users to move funds. The company also urged customers to be careful about sharing their address or details of their crypto holdings, both online and offline. That warning reflects a growing threat of physical attacks on crypto holders, with more than $30 million stolen in the first half of 2026, according to blockchain analytics firm Chainalysis.
The disclosure follows several other recent crypto security breaches, including a record-setting $6.4 billion hack of Binance, a breach at analytics vendor Amplitude that exposed some Coinbase customer contact data, and a suspected $87 million drain involving Ledger hardware wallet devices bought from Southeast Asian reseller CryptoBilis.
