# Gnosis Pay Data Breach Exposes Names, Addresses and Wallet Addresses

- URL: https://usa-24.com/gnosis-pay-data-breach-customer-information/
- Publisher: USA 24
- Section: Cybersecurity
- Published: 2026-11-07T22:37:23.831Z
- Updated: 2026-11-07T22:37:23.836Z
- Topics: Data Breach, Cryptocurrency, Payment Cards, Gnosis Pay, Cybersecurity

> Gnosis Pay says attackers reached its consumer card system on November 3, exposing names, addresses and wallet addresses. The company has not said how many customers were affected.

## Key takeaways

- Gnosis Pay disclosed on November 6, 2026 that attackers accessed its consumer (B2C) card system on November 3.
- The exposed information reportedly includes names, addresses and wallet addresses, but Gnosis has not said how many customers were affected.
- Gnosis says customer funds were not affected and that the white-label platform used by other companies' card programs was not hit.
- Gnosis says it replaced credentials and patched the vulnerability within two hours, and it will shut down the B2C system by December 20, 2026.
- Cardholders should watch for phishing, review recent card activity and confirm that 3D Secure is active on their cards.

The Gnosis Pay data breach came to light on November 6, when the company told customers that attackers had accessed its consumer card system on November 3 and exposed some customer information, including names, addresses and wallet addresses. The company has not said how many people were affected. As of Saturday, the disclosure was still moving through crypto and security outlets, and the scope could grow.

Gnosis Pay is a crypto-linked card issuer. According to [Bitcoin.com](https://news.bitcoin.com/security/gnosis-pay-data-breach-exposes-sensitive-customer-records/), the intrusion hit its business-to-consumer (B2C) card infrastructure rather than the enterprise platform behind its white-label payment programs, which Gnosis says was not affected. That split matters for companies that run their own cards on Gnosis infrastructure. For Gnosis Pay's own cardholders, the exposure is direct.

## What Gnosis Pay says happened

[KuCoin Flash](https://www.kucoin.com/news/flash/gnosis-pay-reports-data-breach-affecting-customer-information) reported the disclosure, which describes unauthorized access to the B2C card system. The key dates, as reported, are below.

| Date | What happened |
|---|---|
| November 3, 2026 | Unauthorized access to the consumer card system |
| Within two hours of discovery | Gnosis says it replaced credentials and patched the vulnerability |
| November 6, 2026 | Public disclosure, with customers notified by email |
| December 20, 2026 | Scheduled shutdown of the B2C system |

Gnosis says its team responded within two hours and that relevant authorities and partners were informed. [ChainCatcher](https://www.chaincatcher.com/en/article/2302679) reported the same containment timeline and said customer funds were not affected. KuCoin Flash said funds remained secure. The available reports do not include a verbatim statement from a named Gnosis Pay executive, so the company's account here comes from paraphrases in secondary coverage.

## What the Gnosis Pay data breach exposed

ChainCatcher reported that names, addresses and wallet addresses leaked. Its report also includes a statement from Lefteris Karapetsas, founder of Rotki, who said the leaked information included his full name, address, card number and the cryptocurrency wallet address tied to his account. One person's account does not establish the size of the breach, but it does suggest that some exposed records contained card-related details.

Reports differ on whether full card numbers were exposed. Gnosis's own statement describes only "some customer information," and the company has not published a complete inventory of what was taken. Until it does, cardholders should assume that any data tied to their account could be in the dataset.

## Why the three-day gap is drawing attention

Bitcoin.com highlighted that the disclosure came about three days after detection. Three days is a short window, but it leaves a question open: what did Gnosis know during that stretch, and when did it know it? The public account starts with containment work and the November 6 notice, and the available reports do not fill in the detection timeline.

The access date also needs a note. Bitcoin.com describes the access as happening on "Friday, Nov. 3," but November 3, 2026, is a Tuesday. Friday was November 6, the disclosure date. This article uses November 3, which matches the other reports, and readers should treat the weekday in Bitcoin.com's account as an error until Gnosis confirms the exact date.

## The June 2026 incident and whether the two are connected

Bitcoin.com also reported that a June 2026 event involving Gnosis-related infrastructure reportedly caused losses of roughly $1.5 million to $1.8 million, which Gnosis later covered. If those figures hold, this is the second Gnosis-related security event in 2026. The available reports do not say whether the two incidents share a cause, and none links them. Treat any connection as an open question rather than a finding.

## Whether US cardholders are affected

The company has not said whether US residents are among those affected. The disclosure says authorities and "data protection agencies" were notified, according to ChainCatcher, but it does not name them. Without a list of regulators or a breakdown by jurisdiction, American cardholders cannot tell from public statements whether they are in scope. Until the company says otherwise, US cardholders should treat their accounts as possibly exposed.

## What Gnosis Pay cardholders should do now

- Watch for phishing. Gnosis says it will never ask for private keys, recovery phrases or full card numbers by email, SMS or phone. Any message that asks for them is fraudulent.
- Review recent card activity and report any charges you do not recognize to Gnosis Pay right away.
- If your name, address, card details or wallet link may have been exposed, contact Gnosis Pay support and ask whether it will reissue your card.
- Check whether any wallet address linked to your card shows activity you do not recognize.
- Confirm that 3D Secure is active on your card. Gnosis says it will enforce 3D Secure for all online payments, which adds a verification step to online purchases.
- If you use other crypto cards or wallets, treat any unsolicited "account verification" request as suspicious. Breach notices are an easy pretext for phishing, so verify any message through the official app or website.

## What to watch next

Several answers will determine how serious this becomes. The first is the number of affected customers, since a company that has not released a count has not given cardholders a way to measure their own risk. The second is whether full card numbers were in the dataset. The third is whether Gnosis names the authorities it notified and whether any US regulator gets involved. The fourth is whether the June and November incidents share a cause.

USA 24 has tracked similar card-data exposures, including the [Revolve breach](https://usa-24.com/revolve-data-breach-saved-cards/) that exposed saved cards for up to 1.5 million people. Crypto firms also remain a standing target, as shown in USA 24's reporting on North Korea's TraderTraitor and the [$6.43 billion Binance theft](https://usa-24.com/binance-hack-north-korea-tradertraitor/). The reported scale of the Gnosis Pay incident is not yet known, but the questions are familiar: how many people were exposed, how quickly the company disclosed, and whether the fix holds.

Gnosis Pay has a fixed date to work toward. The B2C system is scheduled to shut down by December 20, and the company will need to answer the open questions before then. Until it does, the most useful step for cardholders is the same one that applies after any card breach: watch the account closely and treat unexpected contact as hostile.

## Frequently asked questions

### Is my Gnosis Pay card safe after the data breach?

Gnosis says customer funds were not affected, according to reports from KuCoin Flash and ChainCatcher. The exposed data reportedly includes names, addresses and wallet addresses, and reports disagree on whether full card numbers were included. Review your recent activity, watch for phishing, and ask Gnosis Pay support whether your card should be reissued.

### How many Gnosis Pay customers were affected?

Gnosis Pay has not disclosed how many customers were affected. The company has also not published a complete inventory of the exposed data. The scope could grow as more details emerge.

### Did the breach affect Gnosis Pay's white-label platform?

Gnosis says the white-label enterprise platform, which supports other companies' card programs, was not affected. The intrusion reportedly hit only the business-to-consumer card system, which the company plans to shut down by December 20, 2026.

### What is 3D Secure and is Gnosis Pay adding it?

3D Secure is an extra verification step for online card payments. Gnosis says it will enforce 3D Secure for all online payments. Cardholders should check whether it is active on their own cards.

## Sources

1. [Gnosis Pay Reports Data Breach Affecting Customer Information — KuCoin Flash](https://www.kucoin.com/news/flash/gnosis-pay-reports-data-breach-affecting-customer-information)
2. [Gnosis Pay Data Breach Exposes Sensitive Customer Records — Bitcoin.com News](https://news.bitcoin.com/security/gnosis-pay-data-breach-exposes-sensitive-customer-records/)
3. [Gnosis Pay consumer card system suffered unauthorized access: customer names, addresses, and wallet addresses leaked — ChainCatcher](https://www.chaincatcher.com/en/article/2302679)