# Gnosis Pay Reports Data Breach Affecting B2C Card System Unauthorized access exposed customer information, though user funds remain secure and protected. - **Source:** [INCRYPTED](https://brifing.si/source/7cd4625d-3f08-4cc1-983d-4c7d991839ba) - **Published:** 2026-11-07 - **Topic:** [technology](https://brifing.si/c/technology) - **Original article:** - **On Brifing:** https://brifing.si/s/edd2f4ab-ec81-4b70-943e-76dea307000f ## Unauthorized System Access Detected Gnosis Pay identified an unauthorized access incident affecting its B2C card system on November 3, 2026. The company confirmed that while specific customer personal information was exposed during the breach, user funds remained entirely unaffected. The security team initiated containment procedures within two hours of detecting the initial system intrusion. ## Immediate Response and Containment Following the detection, Gnosis Pay replaced compromised security credentials and successfully patched the exploited vulnerability. The company notified all affected customers via email, detailing the specific data points accessed from their accounts. Furthermore, the firm informed relevant data protection authorities and the card issuer to ensure full regulatory compliance. ## B2C Platform Retirement Accelerated The compromised B2C platform was already scheduled for retirement on December 20, 2026. In the interim, Gnosis Pay has implemented mandatory 3D Secure verification for all online transactions. These additional security measures will remain active until the platform is fully decommissioned to prevent any further unauthorized activity or potential data exploitation. ## Corporate Infrastructure Remains Secure Gnosis Pay clarified that the breach was isolated to its B2C business line. The separate corporate platform, which powers card programs for various partners, was not impacted by the incident. Partners have been briefed on the situation, and the company continues to monitor those systems for any signs of suspicious activity. ## Phishing Risks and User Warnings The company issued a stern warning regarding potential phishing attempts following the data exposure. Users are advised to be vigilant against unexpected emails or messages requesting sensitive information. Gnosis Pay explicitly stated it will never ask for PINs, seed phrases, or private keys via email, SMS, or unsolicited phone calls. ## Security Bounty Program Expansion Gnosis Pay is actively encouraging security researchers to report vulnerabilities directly through their official bounty program. The company has aligned its reward structure with Gnosis Chain protocols to incentivize ethical hacking and disclosure. This initiative aims to strengthen overall system resilience and identify potential weaknesses before they can be exploited maliciously. ## Broader Industry Security Context The crypto sector has faced significant security challenges recently, with losses from hacking incidents reaching 6.48 billion dollars in October 2026. This represents a 745 percent increase compared to September. Other firms, including Trezor and Keystone, have previously dealt with data leaks, highlighting the persistent risks associated with third-party logistics and website vulnerabilities. ## Future Security Strategy Implications Gnosis Pay is currently conducting a comprehensive post-mortem analysis of the incident to refine its security posture. The findings will be applied across all company systems to prevent similar occurrences. By prioritizing transparency and enhanced monitoring, the firm aims to restore user trust while finalizing the transition to more secure infrastructure. ## Sources covering this story - https://incrypted.com/gnosis-pay-soobshchyla-ob-utechke-dannyh-klyentov-posle-nesanktsyonyrovannogo-dostupa-k-systeme-kartok/ — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._