TLDR
- Gnosis Pay found unauthorized access to its consumer card system on Nov. 3.
- Exposed data included names, home addresses, card numbers and linked wallet addresses.
- The company said no customer funds were taken and has not said how many users were affected.
- The breach follows a June exploit that drained about $1.5 million, which Gnosis covered.
- The legacy consumer card system is set to shut down on Dec. 20.
Crypto debit card provider Gnosis Pay said an outside party gained unauthorized access to its consumer card system on Nov. 3. The breach exposed customer names, home addresses, card numbers and the crypto wallet addresses linked to their accounts.
The company said no customer funds were taken. It has not said how many customers were affected.
Gnosis Pay disclosed the incident in a blog post about its legacy system. The breach hit the system that serves Gnosis Pay branded cards, which the company already plans to shut down on Dec. 20.
What Data Was Exposed
Lefteris Karapetsas, founder of crypto portfolio tracker Rotki, shared an email from Gnosis Pay in a post on X. He said the exposed data included his name, full home address, card number and every wallet address tied to his account.
“You had already lost me as a user but you could have at least protected my data,” he wrote. His post showed how the leak connects a customer’s real-world identity to their crypto holdings.
At this point I really don't know what to say @gnosispay
– Full home, name and address details
– Card number
– All wallet addresses linked to the accountExtremely disappointed. You had already lost me as a user but you could have at least protected my data ….
Damn shame,… pic.twitter.com/e4yqNZquxJ
— Lefteris Karapetsas (@LefterisJP) November 6, 2026
Wallet addresses on public blockchains show balances and transaction history to anyone. When those addresses are matched with a name and home address, users face a higher risk of targeted scams.
Gnosis Pay said it emailed each affected user with details of the information that was exposed. The company also warned that scammers could use stolen personal details and past purchase information to make fraudulent messages look legitimate.
How Gnosis Pay Responded
The company said it detected the intrusion on Nov. 3 and started containing it within two hours. It replaced affected security credentials and fixed the flaw that allowed the breach.
Gnosis Pay said customer funds and its separate enterprise platform were not affected. That platform powers card programs for other businesses that issue their own cards.
Gnosis Pay was unveiled in 2023. The service lets customers spend stablecoins through Visa debit cards linked to their crypto wallets.
It has an annualized payments volume of around $67.6 million, according to data from Paymentscan. Customers hold their funds in their own wallets and spend them at merchants that accept Visa.
This is the second security incident at Gnosis Pay this year. In June, an exploit drained about $1.5 million through a flaw in wallet software.
That earlier attack was different from the latest breach, which exposed data but not money. Gnosis covered the June losses and restored customer funds, and later published a post-mortem that explained the vulnerability.
Since then, Gnosis Pay has made 3D Secure verification mandatory for online card payments. The check asks customers to confirm their identity before an online purchase goes through.
The firm has also increased fraud monitoring on its consumer cards. Those steps come ahead of the planned shutdown of the legacy consumer system.
That system is set to close on Dec. 20. Until then, Gnosis Pay has warned users that messages using their personal or purchase details may not be genuine, even if they look real.
