Gnosis Pay Data Breach Exposes Customer Information

• •Unauthorized access detected on November 3, 2026, affecting customer data.
• •Customer funds were not compromised; only personal information was exposed.
• •Mandatory 3D Secure verification has been implemented for online transactions.

On November 3, 2026, Gnosis Pay detected unauthorized access to its legacy card processing system, leading to a data breach that was publicly disclosed on November 6. The breach exposed certain customer information, including payment card details and personal data, but customer funds remained unaffected. Gnosis Pay's B2C platform, which powers its branded cards, is scheduled for retirement on December 20, 2026. The company has implemented mandatory 3D Secure for online payments and increased monitoring of card activity to prevent fraud. Affected customers were notified via email detailing the specific information accessed. The breach did not impact Gnosis Pay's enterprise platform, which continues to operate normally. Gnosis Pay has urged customers to remain vigilant against potential phishing attempts using the exposed data.