Gnosis Pay confirms data breach involving legacy card systems

The payment platform Gnosis Pay has issued an official statement confirming that unauthorized parties gained access to sensitive customer information. This security incident originated from a vulnerability within a legacy card system that the company previously utilized. While the team is working to contain the situation, the breach highlights the ongoing risks associated with maintaining older infrastructure in the rapidly evolving digital asset sector.

According to the internal report released by the company in early 2026, the attackers managed to bypass existing security measures by targeting these deprecated protocols. The exposed data reportedly includes personal details linked to cardholders, though the firm maintains that core blockchain wallets and private keys remain untouched. Gnosis Pay has initiated a comprehensive forensic audit to determine the exact scope of the information compromised during this window of unauthorized access.

For users of the platform, the situation serves as a stark reminder to remain vigilant against phishing attempts that often follow such high profile disclosures. The company has already reached out to affected individuals via email to provide guidance on how to secure their personal credentials. They are also working with external cybersecurity experts to patch the vulnerabilities in the legacy architecture and ensure that current systems remain isolated from these outdated components.

This incident comes at a difficult time for the project as it attempts to bridge the gap between traditional finance and decentralized payment solutions. Institutional and retail traders alike are watching closely to see how the platform handles the fallout, particularly regarding regulatory requirements for data privacy. The company stated that it is cooperating with relevant authorities to track the origin of the attack and prevent future occurrences of similar exploits.

Moving forward, the engineering team plans to phase out all remaining legacy components entirely. This transition is intended to provide a more secure environment for users who rely on the platform for their daily transactions. While the immediate impact on the token price has been muted, the market is likely to demand greater transparency regarding how the firm plans to compensate any users who suffer direct losses due to the exposed data.