Secure

Zodiac

Gnosis

Identity

Gnosis Pay has confirmed a security breach exposing sensitive customer information, including payment card numbers, security codes, residential addresses and cryptocurrency wallet details, raising concerns about identity theft and targeted attacks against crypto holders.
The company detected unauthorized access to its legacy consumer card infrastructure on November 3 and <a href="https://gnosispay.com/blog/data-breach-legacy-system-gnosis-pay-branded-cards" rel="noopener noreferrer nofollow">disclosed the incident on November 6</a>. Its security team began containment within two hours, subsequently replacing compromised credentials and addressing the vulnerability.
Gnosis Pay said customer funds remained unaffected and its enterprise infrastructure, which powers white-label card programs for other companies, was not compromised.
The number of affected customers and the method used to access their information have not been disclosed.
<h2 id="card-numbers-home-addresses-and-wallet-details-exposed">Card Numbers, Home Addresses and Wallet Details Exposed</h2>
Customer breach notifications identified a broad range of compromised information, including full names, email addresses, phone numbers, nationalities, residential addresses and cryptocurrency wallet addresses linked to Gnosis Pay accounts.
More concerningly, the exposed records included full payment card numbers, expiration dates and CVV security codes. Some customers also had banking information compromised, including IBAN and BIC details.
Identity documents and dates of birth were not identified among the exposed information.
Rotki founder Lefteris Karapetsas was among those publicly questioning the company’s handling of sensitive customer records.
Karapetsas <a href="https://x.com/LefterisJP/status/2118711419658977773" rel="noopener noreferrer nofollow">revealed</a> that his home address, full name, payment card number and linked wallet addresses had been exposed, expressing frustration that the company had failed to protect his information.
<blockquote>
 Extremely disappointed. You had already lost me as a user but you could have at least protected my data,” he wrote.
</blockquote>
The combination of physical addresses and blockchain wallet identifiers presents particular privacy risks. Attackers could potentially associate identifiable individuals with their cryptocurrency holdings, facilitating targeted phishing, impersonation or physical threats.
Unlike stolen card credentials, which can be cancelled and replaced, exposed residential information and historical blockchain addresses cannot be easily changed or erased.
<h2 id="gnosis-pay-cancels-cards-and-introduces-mandatory-3d-secure">Gnosis Pay Cancels Cards and Introduces Mandatory 3D Secure</h2>
Gnosis Pay has cancelled compromised cards and introduced mandatory 3D Secure authentication for online payments, adding another verification requirement before transactions can be completed.
The company also increased monitoring of card activity and connected wallets, notified affected customers individually and reported the breach to its card issuer, business partners and relevant data protection authorities.
Additional monitoring is being arranged to detect potential misuse of compromised information.
The affected consumer platform was already scheduled for retirement on December 20, 2026, following Gnosis Pay’s decision to focus on enterprise card infrastructure. Its <a href="https://help.gnosispay.com/articles/1452055581-formal-notice-closure-of-the-gnosis-pay-web-app-and-card-21-september-2026" rel="noopener noreferrer nofollow">existing closure schedule</a> remains unchanged, with additional security measures expected to stay in place until then.
The incident follows a separate <a href="https://cryptoadventure.com/gnosis-pay-hack-hits-delay-module-as-users-told-to-withdraw-eure-and-gno/" rel="noopener noreferrer nofollow">June exploit involving Gnosis Pay’s Zodiac Delay Module</a>, which resulted in approximately $1.5 million being stolen before Gnosis reimbursed affected customers. No connection between the two incidents has been established.
It also comes shortly after Chainalysis <a href="https://cryptoadventure.com/chainalysis-breach-exposes-customer-data-ai-tools-cited/" rel="noopener noreferrer nofollow">disclosed</a> unauthorized access to customer information and 12 cryptocurrency websites were <a href="https://cryptoadventure.com/stepdrainer-hits-12-crypto-sites-in-dns-hijack-wave/" rel="noopener noreferrer nofollow">targeted</a> by StepDrainer attacks.
Gnosis Pay has urged customers to avoid unexpected emails, calls and text messages requesting account verification or cryptocurrency transfers, even when those communications contain genuine personal details.
The company maintains that wallet keys and customer funds were not compromised, but the exposure of financial and identifying information leaves affected users facing potential fraud and privacy risks beyond the December shutdown.
The post <a href="https://cryptoadventure.com/gnosis-pay-breach-exposes-card-data-wallet-addresses/" rel="noopener noreferrer nofollow">Gnosis Pay Breach Exposes Card Data, Wallet Addresses</a> appeared first on <a href="https://cryptoadventure.com" rel="noopener noreferrer nofollow">Crypto Adventure</a>.

Gnosis Pay Breach Exposes Card Data, Wallet Addresses

Table of Contents

Crypto Adventure

Other articles published on Nov 12, 2026

Join our free newsletter for daily crypto updates!