Gnosis Pay said it detected unauthorized access to the system behind its branded consumer cards on November 3, 2026, exposing some customer information. The company said customer funds were not affected. It did not say how many customers were affected or what data was exposed, but said it emailed each affected customer with details.
Gnosis Pay said it replaced compromised credentials and fixed the vulnerability. The breach did not affect its enterprise platform. Its consumer platform was already set to retire on December 20, and extra verification is now mandatory for online card payments until then. The company warned customers to watch for phishing messages and to be careful about sharing their addresses or crypto holdings.
