Independent DeFi security desk · Status: operationalMethodology & corrections · Submit an incident
DDeFi Safety ToolsNEWS · DATA · PRACTICAL SAFETYGet the briefing
DeFi Safety · Fact checked

Gnosis Pay breach exposes card details, personal data and crypto wallet information

The crypto debit card provider said customer funds remained safe despite the exposure of sensitive financial and personal information.

By DeFi Tools Guide Editorial Team · Published Nov 6, 2026, 2:34 PM UTC · Updated 2026-11-06 · Risk level: medium
Sources checked: Nov 6, 2026, 9:23 PM UTC

This article may contain affiliate links. Commercial relationships are disclosed in the affiliate policy.

DeFi Safety — illustration keyed to this article's identifier. Source documents are listed under Sources and are not reproduced here.

What happened

The crypto debit card provider said customer funds remained safe despite the exposure of sensitive financial and personal information.

Reported details

  • Gnosis Pay disclosed a data breach after unauthorized access to its legacy debit card system on Nov. 3. Customer funds were not affected.
  • Gnosis Pay has confirmed a data breach affecting customer information. Immediate actions are being taken to safeguard accounts and restore operations.
  • A notification screenshot he shared describes unauthorized access to the consumer-card system on Nov. 3 and says enterprise programs were unaffected.

Why this matters

Whether the Gnosis Pay breach reaches the custody and settlement layer depends on what it actually names. If it points at a custodian, a redemption term or a withdrawal rule, that is the layer where exposure lives, and the name and its timing are the parts worth checking. If it names none of those, this angle simply does not apply here, and reading custody risk into it would be an assumption rather than a finding.

Evidence boundary

On the Gnosis Pay breach, the scope is limited to what the linked 4 reports state, and where they diverge both positions are recorded without either being picked in advance; the headline figure is what to check first.

What to verify

If the Gnosis Pay breach names a custodian or a redemption term, check that name and its timing against the operator’s own documentation; if it names neither, there is nothing here to verify on that layer.

Sources and editorial check time

This information is educational and is not financial, legal, or tax advice.

Sources