Key Notes
- Gnosis Pay detected unauthorized access to its legacy consumer-card system on November 3 and says funds were unaffected.
- The company says its enterprise platform was not involved and all affected customers received individual notifications.
- The vulnerability has been addressed, with added monitoring and mandatory 3D Secure checks for online payments.
Gnosis Pay disclosed a customer-data breach affecting the legacy system behind its consumer-branded crypto cards, saying unauthorized access was detected on November 3. The company says funds were unaffected and its separate enterprise platform, which powers white-label card programs, was not involved.
In Gnosis Pay’s notice, dated November 6, the company said every affected customer had been emailed with details of the information taken from their account. It has not publicly disclosed how many customers were affected or listed the exposed data fields.
Containment and Added Payment Checks
The security team began containment within two hours of detection, subsequently replaced affected credentials and addressed the vulnerability. Gnosis Pay also increased monitoring of card activity and wallets and made 3D Secure verification mandatory for all online card payments.
The company reported the incident to partners and said it was communicating with relevant data-protection authorities and its card issuer. A broader review and specialist monitoring for misuse of the exposed information are being arranged.
Consumer Card Closure Was Already Planned
The affected system was already scheduled to retire on December 20. Gnosis Pay’s September closure notice set out that timetable before this breach, as part of its shift toward enterprise card programs operated through partner apps.
Under that earlier notice, the existing Gnosis Pay card and most functions of its consumer web app are due to stop working at 23:59 UTC on December 20, while withdrawals remain available. Customers who want to continue using a card would need to consider a partner program under its own terms.
That planned business transition is separate from the response to the November intrusion. The incident disclosure says the additional monitoring and online-payment checks will remain in place until the legacy system is retired.
Watch for Targeted Impersonation
Gnosis Pay warned customers about unexpected messages or calls, including those containing genuine personal details or purchase information. It advised opening the official web app or partner app directly and never sharing a recovery phrase, private key, PIN or full card number.
The risk extends beyond whether money left an account during the original intrusion. A convincing support message can use accurate details to lower a recipient’s guard and then request an action that exposes funds. Knowing something about a customer is not proof that a caller represents the card provider.
Recent disclosures elsewhere illustrate that distinction. Coinbase’s Amplitude incident exposed customer contact information without reported losses of customer funds. A separate Chainalysis breach involved identity and contact records, with the company reporting no evidence that authentication credentials or investigation content had been accessed.
Those incidents involved different systems. Gnosis Pay has not identified an attacker or established a connection to them. For affected cardholders, the individual notification provides the most specific account of their own exposure.
Disclaimer: CoinScreamer is an independent media brand owned and operated by NuvexMedia LLC, publishing news, research, and market insights on digital assets and related technologies. NuvexMedia LLC invests in and collaborates with companies across the digital asset, blockchain, and technology sectors. These relationships do not influence CoinScreamer’s editorial coverage, and the publication maintains full editorial independence to provide accurate, timely, and objective information. © 2025 NuvexMedia LLC. All rights reserved. This content is for informational purposes only and should not be considered legal, tax, investment, financial, or other professional advice.
