Gnosis Pay disclosed a breach of the legacy system behind its branded debit cards, exposing certain customer information. The company said customer funds were unaffected and its enterprise platform for white-label card programs was not touched.
The incident was detected on Nov. 3, according to The Block’s original report, published Nov. 7, 2026, at 02:57:56 UTC+8.
What Gnosis Pay said it changed
The company said it contained the incident within two hours, replaced compromised security credentials and addressed the vulnerability.
It also made 3D Secure verification mandatory for online card payments until the affected system’s scheduled retirement on Dec. 20. The report did not specify which customer information was exposed or how many customers were affected.
A wider crypto-card security concern
The breach adds to a series of incidents involving crypto-card infrastructure. The important distinction is between exposure of customer data and unauthorized access to funds:
- Based: An attacker accessed an internal dashboard used to manage its Visa card program on Oct. 5. Some customer data was exposed, but the attacker reportedly failed to access deposited funds.
- Rain infrastructure: In August, a vulnerability in Rain’s Solana card infrastructure allowed unauthorized withdrawals from card balances belonging to Tria and Avici users.
- Revolut: The company said an unauthorized third party used a fraudulent request from a legitimate government email domain to obtain sensitive customer information. That potentially included account statements, identity documents and Bitcoin transaction histories. Revolut said customer funds and systems were unaffected.
These incidents illustrate different risks across third-party infrastructure and legacy systems. In Gnosis Pay’s case, the reported impact was exposure of customer information—not a loss of customer funds, according to the company.