Gnosis Pay Breach Exposes Card Details and Wallet Addresses

Gnosis Pay, a crypto-linked Visa debit card provider, disclosed a security breach that exposed sensitive customer information from its legacy consumer card system. The company detected unauthorized access on Nov. 3 and said it contained the incident within two hours. Gnosis Pay said customer funds remained safe and its separate enterprise platform, which powers white-label card programs, was unaffected.

The exposed data included full payment card numbers, expiration dates, CVV codes, customer names, home addresses and linked cryptocurrency wallet addresses. It also included email addresses, phone numbers and nationalities, with some customers’ banking details—such as IBAN and BIC information—affected. Gnosis Pay did not immediately disclose how many people were impacted or respond to Cointelegraph’s request for comment.

Affected cards were canceled on Nov. 3, and at least one customer reported no suspicious transactions or movement of funds. Gnosis Pay replaced compromised credentials, addressed the vulnerability and made 3D Secure verification mandatory for online payments until the legacy system’s planned retirement on Dec. 20. The company also warned customers about phishing attempts leveraging stolen personal or transaction data and said it was arranging monitoring for potential misuse.

According to OpenRate, a third-party crypto card activity tracker, Gnosis Pay had approximately 2,400 daily active cardholders and processed $263,200 in transactions over the preceding 24 hours. The breach highlights the risks associated with storing payment, identity and blockchain information in connected card platforms.