Gnosis Pay Says Hackers Accessed Branded-Card Customer Data

Gnosis Pay said Friday that unauthorized access on Nov. 3 exposed certain customer information on the legacy system behind its own branded cards, according to a company blog post.

Containment began within two hours of detection, the firm said. It replaced affected security credentials and fixed the vulnerability. Customer funds were not affected, Gnosis Pay wrote. Its enterprise platform that powers white-label card programs for partners was not hit.

What changed for card users

Gnosis Pay is a crypto card provider: users spend stablecoin or crypto balances through a Visa-linked debit card. The breached stack was the B2C branded-card system, already set to retire on Dec. 20, 2026. Until then, the company made 3D Secure, an extra step that confirms online card payments, mandatory for all online charges. It also said it stepped up monitoring of card activity and wallets for fraud.

The firm emailed every affected customer with the specific data taken from their account, reported the incident to partners, the card issuer and data-protection authorities, and said it is arranging specialist monitoring for misuse. It did not publish a headcount of affected customers or a full inventory of data types in the public post.

Protos reported that some customer emails described exposure that can include names, shipping or home addresses, card details and linked wallet addresses, citing screenshots shared by users. Gnosis Pay advised customers to treat unexpected messages about their cards as suspect, never share seed phrases, PINs or full card numbers, and be careful sharing home addresses or crypto holdings online or offline.

Gnosis Pay said every affected customer received an email listing exactly what was taken from their account. The consumer branded-card system is still scheduled to retire on Dec. 20.