Crypto card provider Gnosis Pay said Friday that hackers accessed customer information through the system behind its own branded cards, the latest in a string of security incidents to hit the crypto industry.

Gnosis Pay offers self-custodial crypto payment cards that let users spend stablecoins and other tokens from their own wallets at merchants worldwide.

The company's monitoring systems detected unauthorized access on Nov. 3, and containment began within two hours, Gnosis Pay said in a blog post. It has since replaced the compromised security credentials and fixed the vulnerability. Customer funds were not affected, the company said.

The breach was limited to Gnosis Pay's consumer business, whose platform was already scheduled for retirement on Dec. 20. The affected system powered Gnosis Pay-branded cards, the company's direct-to-consumer card line. Its enterprise platform, which powers white-label card programs for fintech firms, wallets and neobanks, was not affected. The episode illustrates a nuance of self-custodial products: even when users keep control of their funds, personal data held by a service provider can still be exposed.

Gnosis Pay did not say how many customers were affected or what specific data was exposed, but said it emailed each affected customer with details of what was taken from their account.

"While funds were not affected, the security of personal information is just as important and we take full responsibility," the company wrote on X.

We had a data breach affecting the system powering Gnosis Pay-branded cards (our B2C business line) that resulted in the exposure of certain customer information. Everyone affected was sent an email today with full information. We deeply regret that this happened. While funds…

— Gnosis Pay 💳 (@gnosispay) November 6, 2026

In response to the incident, Gnosis Pay said it has stepped up monitoring of card activity and linked wallets for signs of fraud. It has also made 3D Secure, an extra verification step for online purchases, mandatory for all online card payments until the consumer platform is retired on Dec. 20.

The company said it has reported the breach to its partners, its card issuer and data protection authorities, and is arranging specialist monitoring for signs that the exposed data is misused. The scheduled Dec. 20 retirement of the affected platform and that ongoing monitoring will be key developments to watch.

Gnosis Pay urged customers to be wary of unexpected messages about their cards, even ones that include real personal details or references to past purchases. Such caution is standard guidance after data breaches, since criminals often use stolen personal details to make fraudulent messages appear legitimate. The company said it will never ask users for seed phrases, PINs or full card numbers, or ask them to move funds. Customers were also advised to be careful about sharing their address or details of their crypto holdings, both online and offline.

That final warning reflects a growing threat. Physical "wrench attacks" on crypto holders — including home invasions and kidnappings — were on pace for a record year after more than $30 million was stolen in the first half of 2026, according to blockchain analytics firm Chainalysis.

The disclosure follows several other recent breaches across the crypto sector. Beyond the record-setting $6.4 billion hack of Binance, the world's largest crypto exchange, rival trading platform Coinbase said last week that a breach at analytics vendor Amplitude had exposed some customer contact data.

Last month, hardware wallet maker Ledger said all confirmed cases in a suspected $87 million drain involved devices bought from CryptoBilis, a Southeast Asian reseller, and urged recent buyers to move their funds to new devices.