Gnosis Pay, a provider of crypto‑linked payment cards, disclosed that an unauthorized party accessed the system behind its consumer‑branded cards on Nov. 3. The company said the intrusion was contained within two hours, that no user funds were compromised, and that the breach was limited to its B2C platform, which is slated for retirement on Dec. 20.

Breach details and response

According to Decrypt, Gnosis Pay’s monitoring tools flagged the intrusion and the firm immediately replaced the compromised security credentials. The company emailed affected customers with specifics of the data taken, though it did not disclose the number of users impacted or the exact data fields exposed. Gnosis Pay has reported the incident to its card issuer, partners, and data‑protection authorities, and it is arranging specialist monitoring for signs of data misuse.

Impact on services

The breach affected only the consumer‑focused card service; Gnosis Pay’s enterprise platform, which powers white‑label card programs for fintech firms, wallets, and neobanks, remained untouched. To mitigate further risk, the firm has made 3D Secure mandatory for all online card transactions until the consumer platform is retired. Additional fraud‑monitoring measures have been implemented for card activity and linked wallets.

Broader context in crypto security

The incident adds to a series of recent crypto‑industry security events, including the $6.4 billion hack of Binance, a data breach at Coinbase’s analytics vendor Amplitude, and hardware‑wallet compromises linked to a Southeast Asian reseller. Chainalysis reported a record year of physical “wrench attacks” on crypto holders, underscoring heightened threats to personal information in the sector.

What to watch next

Observers will monitor whether the exposed personal data is used in phishing or other fraud attempts, and how Gnosis Pay’s enforcement of 3D Secure influences the adoption of similar safeguards across crypto‑card providers.