Gnosis Pay disclosed on Nov. 6, 2026, that it had detected unauthorized access to its consumer card system on Nov. 3. The company said it began containment within two hours and that its enterprise platform was not affected. It has not disclosed how many customers were affected or published a full list of exposed information.
Rotki founder Lefteris Karapetsas said his exposed records included his name, home address, card number and linked cryptocurrency wallet addresses. Gnosis Pay said customer funds were not affected; the available disclosures do not establish that the exposed records have been misused. The company added mandatory 3D Secure checks for online card payments until the consumer system’s scheduled retirement on Dec. 20, 2026.
