Crypto card provider Gnosis Pay has confirmed a data breach affecting the system behind its consumer cards, three days after detecting unauthorised access — and weeks before the platform is due to shut down for good.

The company said its monitoring systems spotted the intrusion on Monday 3 November and containment began within two hours. Compromised security credentials have since been replaced and the vulnerability used to get in has been fixed, it said. Customer funds were not affected.

The breach was limited to the business-to-consumer system powering Gnosis Pay-branded cards. Its enterprise platform, which provides white-label card programmes for fintech firms, wallets and neobanks, was not affected.

Gnosis Pay has not said how many customers were hit or published a list of the data types taken, but said it emailed every affected customer on 6 November with the details for their own account. One of those customers, Rotki founder Lefteris Karapetsas, said publicly that the data taken from his account included his name, home address, card number and every wallet address linked to the account.

That combination matters more than a routine card leak. Gnosis Pay cards spend directly from self-custodial crypto wallets, so a name and home address tied to wallet addresses can connect a person to their on-chain holdings. The company warned customers to be wary of phishing messages — even ones containing real personal details — and said it will never ask for seed phrases, PINs or full card numbers.

Gnosis Pay has made 3D Secure verification compulsory for online payments and stepped up monitoring of card activity and wallets. Those measures stay in place until the consumer platform is retired as planned on 20 December 2026. The company says it has reported the breach to its partners, its card issuer and data protection authorities.

Sources: Decrypt; KuCoin News; Coinlaw; Gnosis Pay statement on X, quoted in Decrypt.