Gnosis Pay Reports Data Breach Affecting B2C Card System
Unauthorized access exposed customer information, though user funds remain secure and protected.
1Unauthorized System Access Detected
Gnosis Pay identified an unauthorized access incident affecting its B2C card system on November 3, 2026. The company confirmed that while specific customer personal information was exposed during the breach, user funds remained entirely unaffected. The security team initiated containment procedures within two hours of detecting the initial system intrusion.
2Immediate Response and Containment
Following the detection, Gnosis Pay replaced compromised security credentials and successfully patched the exploited vulnerability. The company notified all affected customers via email, detailing the specific data points accessed from their accounts. Furthermore, the firm informed relevant data protection authorities and the card issuer to ensure full regulatory compliance.
3B2C Platform Retirement Accelerated
The compromised B2C platform was already scheduled for retirement on December 20, 2026. In the interim, Gnosis Pay has implemented mandatory 3D Secure verification for all online transactions. These additional security measures will remain active until the platform is fully decommissioned to prevent any further unauthorized activity or potential data exploitation.
4Corporate Infrastructure Remains Secure
Gnosis Pay clarified that the breach was isolated to its B2C business line. The separate corporate platform, which powers card programs for various partners, was not impacted by the incident. Partners have been briefed on the situation, and the company continues to monitor those systems for any signs of suspicious activity.
5Phishing Risks and User Warnings
The company issued a stern warning regarding potential phishing attempts following the data exposure. Users are advised to be vigilant against unexpected emails or messages requesting sensitive information. Gnosis Pay explicitly stated it will never ask for PINs, seed phrases, or private keys via email, SMS, or unsolicited phone calls.
6Security Bounty Program Expansion
Gnosis Pay is actively encouraging security researchers to report vulnerabilities directly through their official bounty program. The company has aligned its reward structure with Gnosis Chain protocols to incentivize ethical hacking and disclosure. This initiative aims to strengthen overall system resilience and identify potential weaknesses before they can be exploited maliciously.
7Broader Industry Security Context
The crypto sector has faced significant security challenges recently, with losses from hacking incidents reaching 6.48 billion dollars in October 2026. This represents a 745 percent increase compared to September. Other firms, including Trezor and Keystone, have previously dealt with data leaks, highlighting the persistent risks associated with third-party logistics and website vulnerabilities.
8Future Security Strategy Implications
Gnosis Pay is currently conducting a comprehensive post-mortem analysis of the incident to refine its security posture. The findings will be applied across all company systems to prevent similar occurrences. By prioritizing transparency and enhanced monitoring, the firm aims to restore user trust while finalizing the transition to more secure infrastructure.
Original article: INCRYPTED — Gnosis Pay Reports Data Breach Affecting B2C Card System