Gnosis Pay, a provider of Visa payment card programs linked to cryptocurrency, has confirmed a cybersecurity incident that exposed sensitive customer information, including card numbers, CVV codes, exGnosis Pay, a provider of Visa payment card programs linked to cryptocurrency, has confirmed a cybersecurity incident that exposed sensitive customer information, including card numbers, CVV codes, ex

Gnosis Pay Suffers Cyberattack, Exposing Visa Card Data: A Warning About Security Risks in Crypto Payments

#Industry Perspectives

TRUST$0.05498-4.18%

Author: Nguyen Rin Hoang

2026/11/10 08:40

Although the company stated that customer funds were not affected, the incident raises important questions about the security of payment services that bridge traditional finance and digital assets.

As stablecoins and crypto payment cards become increasingly popular tools for connecting digital assets to traditional payment networks, the Gnosis Pay incident highlights how protecting personal data is becoming one of the industry's most significant challenges.

Key Takeaways

Gnosis Pay confirmed that its legacy retail card system was compromised, exposing payment card details and personal customer information.

The affected data included card numbers, CVV codes, expiration dates, names, email addresses, phone numbers, home addresses, and crypto wallet addresses.

Gnosis Pay stated that customer funds were not affected and that it had implemented remediation measures.

The company strengthened 3D Secure authentication for online payments and warned users about potential phishing attempts.

The incident highlights the security risks that arise when crypto payment services connect multiple financial systems and user data environments.

What Happened to Gnosis Pay?

According to Gnosis Pay's announcement, the company discovered a system intrusion on November 3, 2026. The incident affected a legacy system used to operate Gnosis Pay-branded payment cards for retail customers.

The leaked information was not limited to basic identification data. It also included details that could potentially be exploited directly in financial fraud.

Specifically, the affected data included:

Card information: Card numbers, CVV codes, and expiration dates.

Personal information: Full names, email addresses, phone numbers, and home addresses.

Financial information: Certain bank account details, such as IBAN and BIC, in relevant cases.

Blockchain information: Users' cryptocurrency wallet addresses.

Notably, Gnosis Pay stated that its Enterprise platform, which serves partners operating their own card programs, was not affected. This indicates that the incident was limited to the legacy B2C system rather than the company's entire infrastructure.

After discovering the incident, the security team moved to contain the breach, address the vulnerability, and replace affected credentials. The company also strengthened 3D Secure verification requirements for online payment transactions.

Nevertheless, Gnosis Pay has not disclosed the number of affected customers, leaving the full scale of the data breach unclear.

Why Is This Data Breach Concerning?

The most significant aspect of the Gnosis Pay incident is not simply the exposure of payment card information, but also the possibility of linking personal identities to blockchain addresses.

In typical data breaches, malicious actors may collect victims' email addresses, phone numbers, or physical addresses to carry out phishing campaigns.

However, the Gnosis Pay case is more complicated because the exposed information also included crypto wallet addresses.

This could allow attackers to link a real-world individual to a specific wallet address. If that wallet has a publicly visible transaction history on the blockchain, the information could be combined to investigate the user's financial activities.

As a result, the risks extend beyond payment information theft and could develop into more targeted forms of attacks.

For example, attackers could impersonate Gnosis Pay support staff, bank representatives, or crypto platforms that victims regularly use. With some personal information already available, they could create more convincing messages designed to trick users into disclosing additional data or authorizing unauthorized transactions.

This is why Gnosis Pay specifically warned customers about suspicious phone calls, emails, and messages following the incident.

Can 3D Secure Eliminate All the Risks?

Gnosis Pay's decision to strengthen 3D Secure verification is an important measure to reduce the risk of unauthorized use of payment card information in online transactions.

3D Secure is an additional authentication mechanism for online card payments. Depending on the card issuer and payment process, users may be required to confirm transactions through an OTP, a banking application, or another authentication method.

This mechanism provides an additional layer of protection beyond standard card details.

However, it is important to distinguish between protecting payment transactions and protecting personal data.

3D Secure can help prevent certain unauthorized transactions, but it cannot automatically prevent:

Phishing campaigns that use genuine customer information.

Impersonation of bank employees or customer support representatives.

The exploitation of wallet addresses to analyze blockchain activity.

Identity theft or other forms of personal information abuse.

Therefore, implementing 3D Secure is necessary, but it is not sufficient to address all the consequences of a data breach.

Users must remain cautious of requests to share OTPs, passwords, seed phrases, or wallet access permissions from untrusted sources.

Impact on Trust in the Crypto Payment Card Ecosystem

Gnosis Pay operates at the intersection of two sectors: traditional payments and digital assets.

This model offers significant convenience by allowing users to spend crypto assets through payment cards compatible with the Visa network.

However, operating such a model requires providers to process multiple types of data, ranging from customer identification details and card information to data associated with blockchain wallets.

This combination creates a broader security risk surface.

A platform may have strong blockchain asset protection while still containing vulnerabilities in its customer information management systems or card data processing infrastructure.

This highlights an important distinction between securing crypto assets and securing an entire crypto payment system.

The Gnosis Pay incident also demonstrates that the reputation of a payment service depends on more than transaction speed, fees, or blockchain compatibility. The ability to protect personal information and respond effectively to security incidents is equally important in maintaining customer trust.

For companies seeking to expand their crypto card services, investment in data governance, access controls, information encryption, and security monitoring must be considered a core part of their product infrastructure.

What Does Shutting Down the Legacy System Mean?

Another noteworthy detail is that Gnosis Pay plans to discontinue its legacy retail card system and application on December 20, 2026.

However, it is important to note that this transition plan was originally announced in September 2026, before the cyberattack occurred. It was not an entirely new decision made in response to the security incident.

Nevertheless, the latest incident makes the transition more significant.

Maintaining a legacy system while developing new infrastructure always creates additional requirements for security controls, the management of retained data, and access revocation.

For Gnosis Pay, the priority is not simply to complete the shutdown of its legacy system, but also to ensure that customer data is handled securely throughout the transition.

Users should also monitor official announcements regarding card replacements, application updates, and any instructions related to their accounts.

What Happens Next?

Over the coming period, there are three key issues to watch regarding Gnosis Pay.

First, the actual scope of the damage.

The company's failure to disclose the number of affected customers means the market cannot yet fully assess the severity of the incident. Identifying the number of affected accounts and the scope of the accessed data will be crucial.

Second, the effectiveness of remediation measures.

Replacing compromised credentials and strengthening 3D Secure verification are necessary steps. However, the more important measure will be whether these actions can prevent the ongoing exploitation of the leaked data.

Third, customer and partner reactions.

Trust is particularly important for financial services. If Gnosis Pay cannot demonstrate its ability to protect customer data and manage security risks after the incident, retaining customers and developing partnerships could become more challenging.

Conclusion

The Gnosis Pay cyberattack serves as a warning about the security risks emerging at the intersection of traditional finance and crypto.

According to the company, the incident did not result in any loss of customer funds. However, the exposure of card details, personal information, and wallet addresses still creates significant risks to users' privacy and financial security.

More importantly, the incident demonstrates that the security of a crypto payment service cannot be evaluated solely by looking at the safety of its blockchain or digital wallets. The entire data processing system, from customer identification to payment card infrastructure, must be protected.

As products combining banking services, stablecoins, and blockchain technology continue to develop, security capabilities and data governance will become critical factors determining the long-term scalability of the digital asset payment industry.

FAQ

1. When was Gnosis Pay attacked?

Gnosis Pay discovered the security incident on November 3, 2026, and publicly disclosed it on November 6, 2026.

2. What customer information was exposed?

The affected data included card numbers, CVV codes, expiration dates, full names, email addresses, phone numbers, home addresses, crypto wallet addresses, and certain banking details.

3. Were Gnosis Pay customers' funds lost?

According to Gnosis Pay's announcement, customer funds were not affected by the incident.

4. What remediation measures has Gnosis Pay implemented?

The company addressed the vulnerability, replaced affected credentials, and strengthened 3D Secure verification for online payments.

5. What should Gnosis Pay users do following the data breach?

Users should monitor official announcements, review their card transactions, remain cautious of suspicious emails and phone calls, and never share their OTPs, passwords, or seed phrases. Those who may have been affected should follow the security instructions provided directly by Gnosis Pay.

Disclaimer: The information provided here is for informational purposes only and should not be considered financial, investment, legal, or professional advice. Always conduct your own research, consider your financial situation, and, if necessary, consult with a licensed professional before making any decisions.

Market Opportunity

Intuition Price(TRUST)

$0.05498

$0.05498$0.05498

USD

Intuition (TRUST) Live Price Chart

The articles shared on this page are sourced from public platforms and are provided for reference only. They do not represent the position or views of MEXC. All rights belong to Nguyen Rin Hoang. If you believe any content infringes upon the rights of a third party, please contact service@support.mexc.com for prompt removal. MEXC does not guarantee the accuracy, completeness, or timeliness of any content and is not responsible for any actions taken based on the information provided. The content does not constitute financial, legal, or other professional advice, nor should it be interpreted as a recommendation or endorsement by MEXC. For expert insights and in-depth analysis, visit MEXC Learn.