Gnosis Pay Data Breach Exposes Customer Information, but Company Says Funds Remain Safe
In a security update published on November 6, Gnosis Pay explained that its monitoring systems identified the intrusion. The company subsequently replaced affected security credentials and addressed the vulnerability responsible for the incident.
The breach involved Gnosis Pay's legacy infrastructure supporting its branded payment cards, which the company categorizes as its business-to-consumer (B2C) operation. While some customer information was exposed, Gnosis Pay has not publicly disclosed a comprehensive list of affected data categories.
What Information Was Exposed in the Gnosis Pay Breach?
Gnosis Pay said the information involved in the incident varies depending on the affected customer. Users who were impacted received individual email notifications explaining precisely what information was accessed.
The company has not published a public list identifying affected customers or detailing every compromised information category. Instead, it is communicating directly with individuals whose data was involved and providing recommendations based on the specific information accessed.
Although the company reported no impact on customer funds, the exposure of personal information creates a separate security concern. Affected users could face phishing attempts or other targeted scams involving information obtained during the incident.
Gnosis Pay Says Funds and Enterprise Platform Were Not Affected
According to the company's official statement, customer funds remained unaffected by the security incident. Gnosis Pay also confirmed that its enterprise platform was not compromised.
The enterprise infrastructure supports the company's white-label card programmes, distinguishing it from the legacy B2C system involved in the breach.
Gnosis Pay has also introduced an additional security requirement for card transactions. 3D Secure verification is now mandatory for online payments made by all users. The additional verification requirement will remain in place until the B2C platform is retired on December 20, 2026.
Gnosis Pay Sets December 20 Date for Legacy Platform Retirement
The security incident has also brought attention to Gnosis Pay's previously announced transition away from its legacy B2C platform. The company confirmed that the affected platform is scheduled for retirement on December 20, 2026.
Gnosis Pay said it has notified relevant partners about the breach and is communicating with data protection authorities. Its card issuer, Monavate, was also identified in the company's blog post.
The incident timeline includes three important dates. Unauthorized access was detected on November 3, the company published its security update and emailed affected customers on November 6, and the legacy B2C platform is scheduled to be retired on December 20, 2026.
What Affected Gnosis Pay Customers Should Do
Gnosis Pay advised customers to remain cautious about unexpected communications, particularly emails, text messages, and phone calls that may use genuine personal information to appear legitimate.
Users should access the official Gnosis Pay web application directly rather than following links received through unsolicited messages. The company also emphasized that customers must never disclose their seed phrases, private keys, PINs, or complete card numbers.
Gnosis Pay further warned users against following instructions to transfer their funds. The company said it would never ask customers to move their assets as part of a security response.
Customers are also encouraged to keep information about their residential addresses and cryptocurrency holdings private. Anyone seeking assistance can contact help@gnosispay.com, although the company said its priority is supporting individuals directly affected by the incident.
Security researchers who identify potential vulnerabilities can report them to bounty@gnosis.io. Gnosis Pay said the same bug bounty rewards offered through its chain programme also apply to vulnerability reports.
GNO Price Records a Slight Decline After the Security Incident
CoinGecko market data on November 7, 2026, showed GNO trading at $114.36, representing a 0.6% decline over the previous 24 hours.
The token recorded a 24-hour trading range between $111.81 and $115.80. Its market capitalization stood at $301.325 million, while trading volume over the same period reached $1.071 million.
GNO is the cryptocurrency associated with the Gnosis ecosystem, rather than the Gnosis Pay card product itself. The company's official security statements did not mention the token or establish any connection between the breach and its market performance.
The financial impact of the incident on GNO therefore remains uncertain, and the available information does not establish that the security breach caused the token's price movement.
Security Concerns Highlight Risks for Crypto Card Providers
The Gnosis Pay incident highlights the importance of protecting customer information across cryptocurrency payment services. Even when customer funds remain secure, unauthorized access to personal data can create additional risks through phishing and targeted social engineering attacks.
For Gnosis Pay, the immediate priorities include supporting affected customers, maintaining additional online payment verification, and completing the transition away from its legacy B2C platform by December 20, 2026.
Further developments will depend on the company's ongoing response and any additional information provided to affected customers and relevant authorities.
Writer: Marcus RenfieldCrypto Market Analyst & Onchain WriterMarcus Renfield covers cryptocurrency markets with a focus on onchain data, Bitcoin price action, and emerging market narratives. His writing examines how capital flows, network activity, and broader market structure influence short- and medium-term trends.He aims to provide clear, data-informed analysis for readers seeking a deeper understanding of crypto market dynamics.