Gnosis Pay Data Breach: User Names, Addresses, and Wallet Addresses Exposed

on November 8, according to Bitcoin.com News, crypto payment service provider Gnosis Pay confirmed a data breach: On November 3, its monitoring system detected unauthorized access targeting the Gnosis Pay branded card (B2C business line) system. It was publicly disclosed on November 6, with response measures initiated within two hours of discovery, including replacing compromised credentials and patching vulnerabilities.

The company stated that the breach is limited to the B2C card system, which is scheduled to be retired on December 20, while the enterprise-grade platform supporting all white-label card programs remains unaffected, and customer funds remain secure; however, it did not disclose the number of affected users or provide a complete list of breached data fields, notifying affected cardholders individually.

Rotki founder Lefteris Karapetsas stated that his name, home address, card numbers, and all cryptocurrency wallet addresses linked to his accounts were compromised, expressing public dissatisfaction. The report noted that the combination of names, addresses, and trackable on-chain addresses could potentially be used for targeted phishing, impersonation, or even physical threats, though there is currently no evidence indicating the leaked data has been exploited.