Gnosis Pay Breach: What Cardholders Should Verify Now

On November 3, 2026, unauthorized access to Gnosis Pay's legacy debit card system exposed customer data, including card numbers, home addresses, and linked crypto wallet information. CoinDesk, Cointelegraph, and The Block each confirmed that customer funds were not affected, but the breach has forced a mandatory security change and left cardholders to assess their exposure to targeted scams.

What the three reports confirm

CoinDesk reported that the breach exposed card numbers, home addresses, and linked crypto wallets. One user said the exposed data tied his home address and card number to every crypto wallet linked to his account, raising the risk of targeted scams. Cointelegraph added that Gnosis Pay disclosed the breach of its crypto debit card system, exposing addresses, payment credentials, and wallet information. The Block specified that unauthorized access occurred on November 3, 2026, and that customer funds remained unaffected.

Who is affected and what changed

Current and former Gnosis Pay debit cardholders whose data was held in the legacy system are directly affected. The exposure of personally identifiable information creates a link between a physical address and specific crypto wallets. This connection increases the likelihood of phishing attacks, social engineering, and physical threats against individuals whose home addresses are now tied to known crypto holdings. According to The Block, Gnosis Pay has made 3D Secure mandatory for all transactions, a confirmed operational change.

Why the operating impact matters now

The shared operating consequence across all three reports is that funds are safe, but personal data is not. Cardholders must now monitor for suspicious activity, change passwords, and enable additional authentication. The exposure of wallet links means that attackers may target users directly, not just through card fraud. The mandatory 3D Secure requirement adds a layer of transaction verification, but it does not address the risk of targeted scams based on leaked personal data.

What remains to be verified

Several details still require a source-document check. The exact number of affected customers has not been disclosed by Gnosis Pay. The scope of the legacy system — which wallet types, card issuance dates, and geographic regions were impacted — remains unclear. Users should verify whether their specific card and wallet data were part of the breach by checking official Gnosis Pay communications and monitoring their linked wallets for unauthorized activity.

The next step for affected users is to confirm whether their personal data was exposed, enable 3D Secure if not already active, and review wallet permissions. The confirmed change is that sensitive data is now public, and the security mandate has shifted. The unresolved question is how many wallets and addresses are at risk.

Reference

• https://www.coindesk.com/business/2026/11/07/gnosis-pay-breach-exposes-card-numbers-home-addresses-and-linked-crypto-wallets
• https://cointelegraph.com/news/gnosis-pay-breach-exposes-card-details-personal-data-crypto-wallet-information
• https://www.theblock.co/news/defi/2026-11-06-gnosis-pay-data-breach-legacy-debit-card-system-435934