Gnosis Pay Card System Compromised, Customer Data Exposed

iconChaincatcher
Share
AI summary iconSummary
On November 3, 2026, Gnosis Pay disclosed an on-chain security incident involving a breach of its card system, resulting in the exposure of customer data. The company responded within two hours, replacing compromised credentials and patching the vulnerability. The leaked information included names, addresses, card numbers, and linked wallets. No funds were compromised, and the incident affected only the Gnosis Pay-branded card, not its white-label platform. The company has implemented additional 3D Secure verification and enhanced monitoring measures, which will remain in place until the card system is shut down on December 20. Authorities and partners have been notified, and a comprehensive security review is currently underway. Inflation data remains a key focus for crypto traders.

ChainCatcher reports that on November 6, 2026, Gnosis Pay disclosed an unauthorized access to its spending card system on November 3, resulting in the exposure of some customer information. The company stated that it initiated containment measures within two hours of detecting the incident, replaced compromised credentials, and patched the vulnerability; customer funds were not affected. This incident involved only Gnosis Pay’s branded spending card business; enterprise platforms supporting white-label payment projects were unaffected. Lefteris Karapetsas, founder of Rotki, said the leaked information included his full name, address, card number, and the cryptocurrency wallet address linked to the account; the number of affected customers and the full scope of exposed data have not yet been disclosed. Gnosis Pay has enabled mandatory 3D Secure verification for online card transactions and intensified monitoring of suspicious card and wallet activity; these measures will remain in place until the spending card system is scheduled to be retired on December 20. The company has notified its partners, issuing banks, and relevant data protection authorities and will conduct a security review.

Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information. Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.