Gnosis Pay Data Breach Leaves Cardholder Details Exposed, Company Says Funds Are Safe

Crypto card users are dealing with another reminder that convenience carries risk. Gnosis Pay, a company that issues Visa debit cards linked to crypto wallets, confirmed on Friday that attackers got into part of its systems and reached sensitive customer records. The firm insists that no customer money was touched, and it says one internal alert showed a card was canceled with no suspicious activity afterward.

What Data Was Exposed in the Gnosis Pay Hack

Card and Personal Details at Risk

Notices sent to users describe a long list of leaked items. These include full card numbers, expiry dates, CVV codes, names, home addresses and linked wallet addresses. Email addresses, phone numbers and nationalities were also exposed, and some people had bank identifiers such as IBAN and BIC details taken as well.

How the Company Responded

The intrusion was spotted on Nov. 3 inside an older consumer card platform, and the team started containing it within two hours. Its separate business platform, which runs white-label card programs, was not affected. Credentials were replaced, the weakness was patched, and 3D Secure checks are now required for online purchases until the old system is shut down on Dec. 20. Customers were warned to watch for phishing messages that use their real details.

Gnosis Pay User Base and Open Questions

Tracking site OpenRate lists about 2,400 daily active cardholders and roughly $263,200 in spending over the last day. The company has not said how many people were affected and did not reply to a request for comment.