Gnosis Pay Reports Unauthorized Access to Card System, Customer Data Exposed
Gnosis Pay disclosed on November 6, 2026, that its card system was accessed without authorization on November 3, exposing some customer information. According to Odaily, the company began containment within two hours of discovering the incident, replaced affected credentials and fixed the vulnerability; customer funds were not affected.The incident was limited to Gnosis Pay’s branded payment card business and did not affect the enterprise platform supporting white-label payment projects. Rotki founder Lefteris Karapetsas said exposed information included his full name, home address, card number and the cryptocurrency wallet address linked to his account. The number of affected customers and the full scope of the exposed information have not been disclosed.Gnosis Pay has made 3D Secure verification mandatory for online card transactions and increased monitoring of suspicious card and wallet activity. The measures will remain in place until the card system is scheduled to be retired on December 20. The company said it notified partners, card issuers and relevant data protection authorities and will conduct a security review.