Gnosis Pay Breach Exposes Customer Data, Prompts Phishing Warning

Gnosis Pay said its monitoring systems detected unauthorized access Nov. 3 in the legacy system supporting its branded consumer cards, exposing some customer information and prompting a warning about phishing risks.

The company said it began containing the breach within two hours. It later replaced affected security credentials and addressed the vulnerability. Gnosis Pay said customer funds and its separate enterprise platform were unaffected.

The company’s public notice did not specify how many customers were affected or list all exposed data fields. It said each affected customer received an email with an account-specific list.

Gnosis Pay made 3D Secure verification mandatory for online card payments and increased monitoring of card activity and wallets. It urged customers to be wary of unexpected messages about Gnosis Pay, partner apps or their cards, including messages containing real personal details or purchase information.

The company advised users not to click message links or share security credentials. It said it would never ask for seed phrases, private keys, PINs, full card numbers or a transfer of funds by email, text or phone.

Gnosis Pay has not confirmed any phishing attempts. The added safeguards are scheduled to remain until the consumer system’s planned retirement on Dec. 20, 2026.