---
title: "Gnosis Pay Discloses Customer Data Breach on Legacy Consumer Card System"
description: "Intruders gained unauthorized access to B2C cardholder records on Nov. 3, prompt-triggering mandatory 3D Secure verification before a planned Dec. 20 decommissioning."
url: https://basisdesk.news/news/gnosis-pay-discloses-legacy-system-data-breach
published: 2026-11-06T16:21:15.809Z
modified: 2026-11-06T16:21:15.809Z
section: Security & Hacks
author: Basis Desk Newsroom (AI-generated, source-verified)
sentiment: bearish
tickers: []
tags: [gnosis-pay, data-breach, cybersecurity, crypto-cards, payments]
license: Quote with attribution to Basis Desk (basisdesk.news). Not financial advice.
---

# Gnosis Pay Discloses Customer Data Breach on Legacy Consumer Card System

Intruders gained unauthorized access to B2C cardholder records on Nov. 3, prompt-triggering mandatory 3D Secure verification before a planned Dec. 20 decommissioning.

## At a glance

- **What happened:** Gnosis Pay detected unauthorized access to its B2C card system on Nov. 3, exposing customer data without compromising user funds.
- **Why it matters:** Personal information was exposed to unauthorized actors, prompting mandatory 3D Secure deployment across all card payments ahead of system retirement.
- **Who is affected:** Retail customers using Gnosis Pay-branded cards.
- **Takes effect:** 2026-12-20
- **What's next:** Full decommissioning of the compromised legacy consumer system on Dec. 20.
- **Primary source:** [Data breach on the legacy system powering Gnosis Pay-branded cards - Gnosis Pay](https://gnosispay.com/blog/data-breach-legacy-system-gnosis-pay-branded-cards) — gnosispay.com

## Key points

- Unauthorized access detected on Nov. 3 exposed customer data on Gnosis Pay's B2C legacy system, while user funds remained intact.
- The enterprise infrastructure powering white-label programs was unaffected, and the compromised system is scheduled for retirement on Dec. 20.
- Mandatory 3D Secure checks have been activated for all online transactions, and relevant data protection authorities have been notified.

## Editorial remark

- **Context:** The breach targeted Gnosis Pay's legacy consumer card system, an infrastructure component that had already been marked for phaseout.
- **Impact:** Direct retail Gnosis Pay cardholders face heightened risks of phishing and credential harvesting, though balances and the enterprise platform were spared.
- **Watch:** The complete shutdown and final retirement of the legacy B2C system on Dec. 20.

Payment network Gnosis Pay disclosed an unauthorized intrusion into the infrastructure powering its consumer-facing debit cards on Nov. 6, leading to the exposure of customer information [1]. The incident, detected on Nov. 3, affected the platform's direct business-to-consumer card program [1]. The company stated that containment operations began within two hours of initial detection, during which engineers revoked compromised security credentials and patched the underlying vulnerability [1].

No user funds were compromised during the incident, according to the project's official statement [1]. Furthermore, Gnosis Pay confirmed that its enterprise platform—which runs its white-label payment operations—remained insulated and was not impacted by the breach [1]. The compromised consumer system had previously been slated for complete retirement on Dec. 20 [1].

## Protective Measures and Regulator Notifications

To safeguard users prior to the full decommissioning date, Gnosis Pay has made 3D Secure verification compulsory for all online card transactions and expanded active monitoring of associated card activity and user wallets [1]. The provider confirmed it has notified its card issuer, shared incident details with relevant data protection authorities, and alerted each impacted customer via email regarding the specific data categories exposed [1].

The security lapse highlights ongoing operational risks at the intersection of crypto payment systems and traditional payment processing infrastructure, arriving as broader market sentiment lingers in "Fear" at 28 with crypto market capitalization at $2.54 trillion at the time of writing. While digital asset protocols routinely secure base layer funds, off-chain infrastructure remains a vector for identity theft and social engineering campaigns [1].

Gnosis Pay warned cardholders to remain vigilant against phishing attempts, text scams, and unauthorized inquiries requesting private keys, seed phrases, PINs, or funds [1]. The platform stated its heightened fraud monitoring protocols and mandatory 3D Secure controls will persist until the legacy system shuts down on Dec. 20 [1].

## Sources

1. [Data breach on the legacy system powering Gnosis Pay-branded cards - Gnosis Pay](https://gnosispay.com/blog/data-breach-legacy-system-gnosis-pay-branded-cards) — gnosispay.com, 2026-11-06

---
Basis Desk Newsroom · AI-generated, source-verified · https://basisdesk.news/about/how-we-use-ai