Gnosis Pay Data Breach Exposes Card and Crypto Wallet Details

What customer information was exposed in the Gnosis Pay breach?

Unauthorized access detected on November 3 exposed information from Gnosis Pay's legacy consumer card system, with reviewed customer notifications identifying card numbers, expiration dates, CVV codes, home addresses, contact details and linked cryptocurrency wallet addresses.

Orbitrum Investor Impact

Why does the breach matter for Gnosis Pay's business?

The exposure creates fraud and customer trust risks for a payments business handling approximately $67.6 million in annualized payment volume, potentially complicating its shift toward enterprise card programs even though that platform was not compromised.

Were Gnosis Pay customer funds or enterprise partners affected?

Gnosis Pay said customer funds were unaffected and its separate enterprise platform powering partner card programs was not compromised, although exposed personal and payment information could still facilitate targeted phishing and fraud.

How many Gnosis Pay customers were affected?

Gnosis Pay has not disclosed the number of affected customers, but said it emailed each affected cardholder on November 6 with details of the information exposed.

What security measures has Gnosis Pay implemented?

The company began containing the intrusion within two hours of detection, replaced compromised credentials, addressed the vulnerability, increased fraud monitoring and made 3D Secure verification mandatory for online card payments.

What happens next after the Gnosis Pay data breach?

Gnosis Pay plans to retire its affected consumer card system on December 20, 2026, while maintaining additional security measures and communicating with data protection authorities, its card issuer and partners; whether exposed information leads to further fraud or regulatory consequences remains unresolved.