Gnosis Pay suffers data breach affecting cardholder information

Users of the Gnosis Pay platform are facing uncertainty this week following reports of a significant security breach. The incident involved unauthorized access to internal systems, resulting in the exposure of sensitive cardholder information and some associated crypto wallet data. The team behind the project has confirmed the intrusion and is currently working with forensic experts to determine the full extent of the compromised records.

Initial reports indicate that while the core smart contracts governing the underlying assets were not directly tampered with, the peripheral databases holding user registration details were hit. This means that email addresses, physical mailing addresses, and specific card transaction histories may be in the hands of third parties. For those holding funds on the platform, the primary concern is now the risk of targeted phishing attacks rather than direct wallet drainage.

Security analysts suggest that users should immediately freeze their cards and monitor their associated email accounts for suspicious activity. Phishing attempts often follow these types of breaches, where attackers pose as customer support representatives to solicit private keys or recovery phrases. It is vital to remember that no legitimate representative will ever ask for a mnemonic phrase or a private key.

This event highlights the inherent risks of bridging traditional financial services with digital asset platforms. As these interfaces become more common in 2026, the surface area for cyberattacks increases significantly. Users should practice strict hygiene by using unique passwords and enabling hardware based authentication whenever possible, especially for platforms that store identification data.

The company has promised to provide further updates as the investigation progresses. They are currently notifying affected individuals and coordinating with law enforcement to track the source of the unauthorized access. In the meantime, the community is advised to exercise extreme caution with any communications claiming to be from the platform, as bad actors often exploit the confusion following a major incident to launch secondary scams.