The data breach incident disclosed on November 6, 2026, by Gnosis Pay exposed customer information from their legacy consumer card system, but the company stated that customer funds were not affected. Security monitoring detected unauthorized access on November 3, and measures to contain it were initiated within two hours. Since the service was already scheduled to be discontinued, additional payment checks will continue until its shutdown in December.

Key Points

• This leak affects consumer cards and does not involve the Gnosis Pay enterprise platform.
• Affected cardholders have received notifications related to their accounts via email.
• Online card purchases now require 3D Secure verification.
• The Brand Card service will end on December 20, 2026.

Gnosis Pay Scope and Response to Data Breaches

This intrusion affected the legacy systems that serve consumers of the Gnosis Pay brand cards. The enterprise white-label platform, which supports other corporate card projects, was not affected.

Gnosis Pay indicates that their security team began to contain the incident within two hours of discovering the unauthorized access on November 3rd, subsequently replaced the affected security credentials, and fixed the vulnerability.

Mandatory payment checks and closer monitoring

Gnosis Pay has made 3D Secure – an additional verification step for online shopping – a mandatory requirement for all online card payments, until the consumer system is disabled.

The company stated that card transactions and wallets will also be subject to stricter fraud monitoring, as well as surveillance of attempts to access funds. The company mentioned that a comprehensive review is underway, and that lessons learned from this will be applied throughout the system. Additionally, specialized monitoring measures have been put in place to detect any misuse of leaked information.

All individuals affected by this Gnosis Pay data breach received an email on November 6th, informing them of which information from their accounts was compromised, along with specific recommendations for their accounts. The company's support team is prioritizing the assistance for these customers.

Customer Guide for Preventing Phishing

Gnosis Pay It is recommended that customers do not click on links in unsolicited messages, but instead visit their official website applications or partner applications directly. This guide reminds that fraudulent communications may contain accurate personal information or mention a real purchase.

This warning applies to any unexpected emails, text messages, phone calls, and letters that mention Gnosis Pay, partner applications, or payment cards. The company states that neither it nor its partners will ever request customers to provide mnemonics, private keys, PIN codes, or complete card numbers.

In addition, customers will never be required to re-verify their identity via email or text message, nor will they be instructed to make transfers based on messages or phone calls. If there are any questions, customers may contact... [ email protected ]Mandatory requirements:

The closure plan for December was earlier than this leak.

The retirement of the consumer platform predates this incident in November. According to a notice issued on September 21, the brand card service will be discontinued at 23:59 on December 20, 2026. UTC

By then, the transaction authorization for both physical and virtual cards will be terminated. The withdrawal function will still be available through web applications, and customers will continue to retain ownership of their assets in their self-managed Safe accounts.

If customers wish to continue using the card thereafter, they must join the partner program under the revised terms, but this is not mandatory, as the brand card will become invalid in any case. Before closure, customers are notified to download their transaction records and adjust any regular merchant payment arrangements.

Standard cardholder support is expected to end on June 18, 2027, while refund, dispute, and chargeback assistance will continue until June 12, 2028.

The previous exploit involved the Zodiac framework.

In another incident that occurred in June, approximately $1.5 million in digital assets were stolen due to a vulnerability in a card account. In a post-event analysis released in July, Gnosis Pay, the cause was traced back to a vulnerability in the Zodiac smart contract framework.

The company stated that customers affected by the vulnerability in June have received full compensation.

This article was generated with the assistance of artificial intelligence and has been reviewed by an editorial team.