Gnosis Pay said an outside party gained unauthorized access to its consumer card system on Nov. 3, exposing customer names, home addresses, card numbers and cryptocurrency wallet addresses linked to their accounts. The company said no customer funds were taken, but it has not disclosed how many users were affected.

The incident was disclosed in a blog post concerning Gnosis Pay’s legacy consumer system, which supports Gnosis Pay-branded cards and is scheduled to shut down on Dec. 20. CoinCentral’s report is available here.

Data exposed in the breach

Lefteris Karapetsas, founder of crypto portfolio tracker Rotki, shared an email from Gnosis Pay in a post on X. He said the exposed information included his name, full home address, card number and every wallet address associated with his account.

“You had already lost me as a user but you could have at least protected my data,” Karapetsas wrote. His post illustrated how the breach could connect a customer’s real-world identity with their cryptocurrency holdings.

At this point I really don't know what to say @gnosispay – Full home, name and address details – Card number – All wallet addresses linked to the account Extremely disappointed. You had already lost me as a user but you could have at least protected my data …. Damn shame,… pic.twitter.com/e4yqNZquxJ — Lefteris Karapetsas (@LefterisJP) November 6, 2026

Wallet addresses on public blockchains can reveal balances and transaction histories. When linked to a person’s name and home address, that information can increase the risk of targeted scams. Unlike payment-card details, which an issuer can block and reissue, a public wallet address is permanent, and its on-chain activity remains visible to anyone who knows the link between the address and an identity.

Gnosis Pay said it emailed each affected user with details about the information exposed in the incident. The company also warned that scammers could use stolen personal information and previous purchase details to make fraudulent messages appear legitimate.

Gnosis Pay’s response

Gnosis Pay said it detected the intrusion on Nov. 3 and began containing it within two hours. The company replaced affected security credentials and fixed the flaw that enabled the unauthorized access.

It said customer funds and its separate enterprise platform were not affected. The enterprise platform supports card programs operated by other businesses that issue their own cards.

Gnosis Pay was unveiled in 2023. The service allows customers to spend stablecoins through Visa debit cards linked to their cryptocurrency wallets. According to data from Paymentscan, the service has an annualized payments volume of around $67.6 million. Customers retain their funds in their own wallets and use the cards at merchants that accept Visa. That structure keeps balances outside the company’s systems, though operating the cards still involves the personal data this breach exposed.

The breach is Gnosis Pay’s second security incident this year. In June, an exploit involving a flaw in wallet software drained about $1.5 million. That attack differed from the latest incident, which exposed customer data but did not take funds.

Gnosis covered the losses from the June exploit and restored customer funds. It later published a post-mortem explaining the vulnerability. Since then, Gnosis Pay has made 3D Secure verification mandatory for online card payments. The process requires customers to confirm their identity before an online purchase is completed.

The company has also increased fraud monitoring for its consumer cards. Those measures come before the planned shutdown of the legacy consumer system on Dec. 20. Until the system closes, Gnosis Pay has warned users that messages containing their personal or purchase information may be fraudulent, even when they appear authentic. The number of affected users remains undisclosed as that wind-down date approaches.