Gnosis Pay Consumer Card System Hit by Unauthorized Access, Customer Names, Addresses, and Wallet Addresses Leaked

Gnosis Pay disclosed on November 6, 2026, that its consumer card system suffered unauthorized access on November 3, exposing some customer information. The company said it initiated containment within two hours of discovering the incident and has replaced affected credentials and patched the vulnerability; customer funds were not affected.

The incident only involved Gnosis Pay-branded consumer card operations; the enterprise platform supporting white-label payment projects was not affected. Rotki founder Lefteris Karapetsas said the leaked information included his full name, address, card number, and the crypto wallet address associated with his account; the number of affected customers and the full scope of the information have not yet been disclosed.

Gnosis Pay has enabled mandatory 3D Secure verification for online card payments and strengthened monitoring of suspicious card and wallet activity, with these measures set to remain in place until the consumer card system is scheduled to be retired on December 20. The company said it has notified partners, card issuers, and relevant data protection authorities, and will conduct a security review. (Bitcoin.com News)