The Gnosis Pay data breach is disclosed: the crypto card platform revealed on November 7 that an intruder accessed customer data including card numbers, home addresses and the crypto wallet addresses linked to accounts — a doxxing trifecta that neatly connects a real-world identity to an on-chain footprint.
Gnosis Pay said the intrusion was detected on November 3 and contained within two hours. Customer funds were not affected, and the separate enterprise card platform was untouched. The number of affected customers was not disclosed. Users have been warned to expect targeted scam attempts — the kind that work better when the attacker already knows your address and which wallets you use.
What the Gnosis Pay Data Breach Covered
- Exposed: card numbers, home addresses, linked crypto wallet addresses.
- Not exposed: customer funds and the enterprise card platform.
- Detection: November 3; containment: within two hours.
- Scope: affected-customer count not disclosed.
The combination is worse than any one field alone. Card details alone get sold; an address paired with a wallet history gets you phishing emails that know exactly which bags you are holding.
Funds Safe, Data Not — And Why That Split Matters
The crypto industry’s security reporting has settled into a familiar pattern: funds are safe, and the real damage is informational. Exchange hacks dominate the headlines because the loss is a single clean number, but breaches like this one quietly arm social-engineering operations for months. Containment in two hours speaks to decent monitoring; the silence on affected-customer count speaks to the part still being worked out.
For Gnosis Pay users, the practical checklist is old-fashioned: treat any unexpected call or email referencing your card or wallet as hostile, rotate anything reusable, and monitor wallet addresses for interaction attempts. For the rest of the sector, the Gnosis Pay data breach lands as a reminder that payments data and on-chain identity are converging into one attack surface — and attackers read both fluently.
