Gnosis Pay Breach Exposes Customer Card Details, Addresses and Wallet Links
Unauthorized access to Gnosis Pay’s legacy debit card system on Nov. 3 exposed customer information, including card details and personal data that could connect a person’s home address to crypto wallets. Gnosis Pay said customer funds were not affected, but the linked information could make targeted scams more convincing.
Key takeaways
- Unauthorized access to Gnosis Pay’s legacy debit card system occurred on Nov. 3.
- One customer said the exposed data linked his home address and card number to his connected crypto wallets.
- Gnosis Pay said customer funds were not affected.
- The reports do not state how many customers were affected.
Gnosis Pay disclosed a data breach after unauthorized access to its legacy debit card system on Nov. 3. Reports say exposed information included sensitive personal and financial data; one customer said it connected his home address and card number with every crypto wallet linked to his account.
Gnosis Pay said customer funds remained safe. The reported exposure concerns information about customers and their accounts, not a theft of crypto or card balances.
What information was exposed, and what is the risk?
The combination of identity, payment and wallet information is particularly concerning. A scammer who knows a person’s address and that they use crypto may be able to craft a more believable message or impersonate a service provider. The reports do not say that attackers gained access to customers’ wallets or private keys.
This is a different kind of risk from a wallet breach: the danger described here is that personal details can make fraud more targeted, even when funds themselves remain untouched. It also echoes other recent crypto-related data exposures, including a SafePal customer order-data breach, where customer information was exposed but the report said funds and private keys were not affected.
What should Gnosis Pay customers do?
Treat unexpected calls, texts and emails about Gnosis Pay, cards or crypto wallets with extra caution—especially messages that cite personal details to appear legitimate. Don’t share passwords, recovery phrases or one-time verification codes, and use official channels to check whether a message is genuine.
The available reports do not specify how many users were affected or provide a complete list of exposed data fields. Customers should watch for direct updates from Gnosis Pay about the scope of the incident and any steps it recommends.
Frequently asked questions
Was crypto stolen in the Gnosis Pay breach?
Gnosis Pay said customer funds were not affected. The reported incident involved exposure of customer information, and the reports do not say attackers accessed wallets or private keys.
What information was exposed in the Gnosis Pay breach?
Reports describe exposure of sensitive personal and financial information. One customer said his home address and card number were linked to every crypto wallet connected to his account.
When did the Gnosis Pay breach happen?
The Block reported unauthorized access to Gnosis Pay’s legacy debit card system on Nov. 3, 2026.
What should Gnosis Pay customers do after the breach?
Be wary of personalized messages or calls claiming to be from Gnosis Pay or a wallet provider. Never share recovery phrases, passwords or verification codes, and verify messages through official channels.