Crypto Card Provider Gnosis Pay Says Hackers Accessed Customer Data

Crypto card provider Gnosis Pay said Friday that hackers accessed customer information through the system behind its own branded cards, the latest in a string of security incidents across the industry.

The company’s monitoring systems detected unauthorized access on Nov. 3, and containment began within two hours, Gnosis Pay said in a blog post. It has since replaced the compromised security credentials and fixed the vulnerability. Customer funds weren’t affected, the company said.

The breach was limited to Gnosis Pay’s consumer business, whose platform was already scheduled for retirement on Dec. 20. Its enterprise platform, which powers white-label card programs for fintech firms, wallets and neobanks, wasn’t affected.

Gnosis Pay didn’t say how many customers were affected or what data was exposed, but said it emailed each affected customer with details of what was taken from their account.

“While funds were not affected, the security of personal information is just as important and we take full responsibility,” the company wrote on X.

Gnosis Pay said it has stepped up monitoring of card activity and wallets for fraud, and has made 3D Secure, an extra verification step, mandatory for all online card payments until the consumer platform is retired. It has reported the breach to its partners, its card issuer and data protection authorities, and is arranging specialist monitoring for signs that the data is misused.

The company urged customers to be wary of unexpected messages about their cards, even ones that include real personal details or purchases. It said it will never ask for seed phrases, PINs or full card numbers, or ask users to move funds.

It also told customers to be careful about sharing their address or details of their crypto holdings, both online and offline.

That last warning reflects a growing threat. Physical “wrench attacks” on crypto holders, including home invasions and kidnappings, were on pace for a record year after more than $30 million was stolen in the first half of 2026, according to blockchain analytics firm Chainalysis.

The disclosure follows several other recent examples of breaches in crypto security. Beyond the record-setting $6.4 billion hack of the world’s largest crypto exchange in Binance, rival trading platform Coinbase said last week that a breach at analytics vendor Amplitude exposed some customer contact data.

Last month, hardware wallet maker Ledger said all confirmed cases in a suspected $87 million drain involved devices bought from CryptoBilis, a Southeast Asian reseller, and urged recent buyers to move their funds to new devices.