Gnosis Pay has disclosed a knowledge breach that exposed buyer data, the newest in a sequence of safety incidents at digital asset corporations.
The firm, which lets customers spend stablecoins with Visa debit playing cards tied to their crypto wallets, announced Friday (Nov. 6) it had uncovered the breach earlier within the week.
“On 3 November 2026, our monitoring systems detected unauthorized access to the system powering Gnosis Pay-branded cards (our B2C business line), resulting in the exposure of certain customer information,” the corporate stated.
“Our security team responded immediately and containment began within two hours of detection. We subsequently replaced the affected security credentials and addressed the vulnerability.”
Gnosis Pay stated the breach was restricted to the system powering its branded playing cards, which was already due for retirement on Dec. 20. The firm added that its enterprise platform, which powers all of its white-label card applications, was not impacted.
The firm stated it has now made 3D Secure verification obligatory for on-line card funds and stepped up fraud monitoring forward of the legacy client system’s deliberate shutdown subsequent month. Gnosis Pay additionally cautioned that scammers might use stolen private data and buy histories to make fraudulent messages appear official.
The breach was flagged in a report Saturday (Nov. 7) by CoinDesk, which famous that the incident will increase the chance of focused scams, as a result of cybercriminals might use the stolen information to tie customers’ real-world identities with their crypto holdings.
Eleftherios Karapetsas, founding father of crypto portfolio tracker Rotki, shared an electronic mail acquired from Gnosis Pay in a post on X. That message stated that the stolen information included his title, full house deal with, card quantity and each pockets deal with related to his account.
“You had already lost me as a user but you could have at least protected my data,” he wrote.
The incident comes within the wake of the most important crypto hack ever recorded, wherein cybercriminals stole more than $6 billion from Binance, the world’s largest crypto foreign money alternate, in late October.
In addition to Binance, Brazil’s Mercado Bitcoin stated final week it will soak up a $40 million loss following a hack.
Two different companies, Nubank and Mercado Pago, paused some cryptocurrency operations final week following points with third-party suppliers.
Research from PYMNTS Intelligence has discovered a notable variety of cyber incidents ensuing from third-party breaches. For instance, 38% of faux bill scams had at their roots compromised distributors or suppliers, together with 43% of phishing incidents.
