🚨 Gnosis Pay confirms breach of its card system—but funds are safe!

Gnosis Pay said hackers accessed customer information on the legacy system behind its branded cards, though funds weren’t affected and its enterprise card platform was untouched.

📊 The official details:

• Discovery: November 3, 2026

• Containment: Less than two hours

• Scope: Consumer card system (B2C) only

• Enterprise platform: Not affected

━━━━━━━━━━━━━━━

🔍 What data was leaked?

⚠️ Name, address, card number, CVV

⚠️ Linked wallet addresses

⚠️ IBAN details (for Monerium customers)

✅ Identity document images and dates of birth: Not leaked

📊 What is the company doing?

✅ Mandatory 3D Secure for all online payments

✅ Enhanced monitoring of cards and wallets

✅ Phishing warning

✅ Data protection authorities notified

💡 What does this mean for traders?

✅ Users’ funds are safe

⚠️ But personal data was leaked (phishing risk)

📊 The system was already scheduled to shut down on December 20, 2026

📊 What exactly happened?

  • Discovery: On November 3, 2026, monitoring systems detected unauthorized access to the Gnosis Pay card system (B2C).

  • Containment: The security team contained the incident in less than two hours, changed the affected credentials, and fixed the vulnerability.

  • Scope: The breach was limited to the consumer card system. The enterprise platform, which serves white-label card programs, was not affected.

  • Funds: The company confirmed that users’ funds were not affected and that there was no suspicious activity on cards or wallets.

🔍 What data was leaked?

The company emailed every affected customer, explaining exactly what was leaked. According to statements by Lefteris Karapetsas (Rotki founder), the leaked data included:

  • Name, address, card number, expiration date, and CVV.

  • Wallet addresses linked to the account.

  • IBAN/BIC details for Monerium customers.

  • Note: The company confirmed that identity document images and dates of birth were not among the leaked data.

💡 What is the company doing?

  • Mandatory 3D Secure: An extra verification step has been enabled for all online payments until the system is permanently shut down.

  • Enhanced monitoring: Monitoring of card and wallet activity has been increased to detect any fraud attempts.

  • Phishing warning: Customers were advised not to trust any message (email/text/phone call) mentioning Gnosis Pay, even if it contains their real information. The company will never ask you for your seed phrase or PIN, or ask you to transfer money.

🎯 One very important thing (shutdown timing)

This consumer card system (B2C) was already scheduled to shut down on December 20, 2026, meaning the breach occurred a month and a half before the shutdown. The company confirmed that the shutdown is still on schedule and that it is working with data protection authorities and the source (card issuer).

#Crypto #تداول #GnosisPay #أمان #Crypto #Trading