Key Takeaways
Gnosis Pay detected unauthorized entry on Nov. 3, 2026, and disclosed the information breach Nov. 6, initiating containment inside two hours of detection.Rotki founder Lefteris Karapetsas reported that uncovered data included his full identify, residence handle, card quantity and linked cryptocurrency pockets addresses.The affected shopper card system is scheduled for retirement Dec. 20, 2026, whereas the corporate’s enterprise platform was reportedly unaffected.
What Occurred to Gnosis Pay?
The cryptocurrency cost supplier disclosed the incident three days after monitoring programs recognized unauthorized entry. In line with Gnosis Pay’s information breach replace, the intrusion affected its business-to-consumer (B2C) card infrastructure, slightly than the enterprise platform supporting its white-label cost applications.
“On 3 November 2026, our monitoring programs detected unauthorised entry to the system powering Gnosis Pay-branded playing cards (our B2C enterprise line), ensuing within the publicity of sure buyer data,” the corporate defined.
Gnosis Pay harassed that its safety personnel responded instantly, initiating containment inside two hours of detection. The corporate subsequently changed affected credentials and addressed the vulnerability accountable for the intrusion.
“The info breach was restricted to the system powering Gnosis Pay-branded playing cards, which was already scheduled for retirement on 20 December 2026,” Gnosis Pay said. “Our enterprise platform, which powers all of our white-label card programmes, was not affected.”
The corporate has not publicly disclosed what number of clients have been compromised, nor has it revealed a complete stock of uncovered data. As an alternative, affected cardholders acquired individualized notifications detailing which account information have been accessed.
Gnosis Pay Pockets Addresses Uncovered Alongside Names and Dwelling Addresses
The potential penalties lengthen past typical payment-card fraud. Lefteris Karapetsas, founding father of cryptocurrency portfolio tracker Rotki, reported that his compromised data included his full identify, residential handle, card quantity and each cryptocurrency pockets handle related together with his account.
“Extraordinarily dissatisfied. You had already misplaced me as a person however you can have not less than protected my information…. Rattling disgrace, actually,” Karapetsas wrote.
The disclosure illustrates an uncomfortable contradiction surrounding self-custodial cryptocurrency funds. Though clients retain management of their digital belongings, centralized cost infrastructure can nonetheless accumulate data connecting identifiable people to publicly traceable blockchain addresses.
Such mixtures create alternatives for focused phishing, impersonation and probably bodily intimidation, notably when residential addresses accompany monetary data. Nevertheless, the out there disclosures don’t set up that the uncovered information have already been exploited for these functions.
Karapetsas wasn’t the one one dissatisfied. “Are you able to shut down tomorrow so there isn’t a third hack please?” one X person replied to the Gnosis Pay X submit on the topic. “What handle ought to I take advantage of to sue the shit out of you?” one other X account requested.
Gnosis Pay Provides 3D Safe Checks After Safety Breach
Gnosis Pay has launched obligatory 3D Safe verification for on-line card funds whereas rising monitoring of suspicious card and pockets exercise. These protections will stay energetic till the patron system’s scheduled Dec. 20 retirement.
“We sincerely apologise,” the corporate declared. Gnosis Pay added:
“We perceive how severe it’s to have your private data uncovered, and we deeply remorse that this occurred. Whereas funds weren’t affected, we recognise that the safety of private data is simply as vital.”
The supplier additionally notified its companions and card issuer whereas speaking with related information safety authorities. Gnosis Pay stated it’s conducting a complete safety evaluation and arranging specialist monitoring for proof of stolen data being misused. The corporate cautioned:
“Be suspicious of any surprising electronic mail, textual content, name or letter about Gnosis Pay, a Associate App or your card, even when it contains your actual particulars or an actual buy.”
“By no means share your seed phrase, personal keys, PIN or full card quantity,” Gnosis Pay added, emphasizing that respectable representatives won’t ever request delicate credentials or instruct clients to switch funds by unsolicited communications.
The November disclosure follows a separate June 2026 incident involving Gnosis-related infrastructure that reportedly resulted in roughly $1.5 million to $1.8 million in losses, which Gnosis subsequently lined.
In contrast to that incident, the newest breach principally threatens private privateness slightly than speedy asset custody. Nonetheless, the excellence affords restricted consolation when compromised id information can completely affiliate people with clear blockchain transactions.
Retiring weak infrastructure might remove future publicity by that system, nevertheless it can’t reverse the disclosure of delicate private data. Gnosis Pay says buyer funds stay protected, but uncovered identities, residential addresses, and cryptocurrency pockets connections current privateness dangers that can’t merely be undone.
The Gnosis Pay incident follows a protracted string of crypto trade information breaches in 2026. Ledger uncovered buyer data in January, adopted by Safepal’s leak affecting practically 40,000 clients and Trezor’s breach involving roughly 81,000 individuals. Keystone suffered an October intrusion exposing practically 26,000 purchaser information, whereas Chainalysis disclosed a breach involving person credentials and authentication tokens.
