Gnosis Pay disclosed unauthorized access to its business-to-consumer card infrastructure on Nov. 6, three days after monitoring systems detected the intrusion. The company said the breach exposed certain customer information, with Rotki founder Lefteris Karapetsas reporting that his records included his full name, home address, card number and linked cryptocurrency wallet addresses. Gnosis Pay said funds were not affected, containment began within two hours, credentials were replaced and the vulnerability was addressed. The company did not disclose the number of affected customers or publish a complete inventory of exposed data, instead sending individualized notifications to affected cardholders. Its enterprise platform supporting white-label card programs was not compromised, and the consumer system is scheduled for retirement on Dec. 20, 2026. Gnosis Pay has made 3D Secure mandatory for online payments, increased monitoring and notified partners, its card issuer and relevant data protection authorities. The incident follows a separate June 2026 Gnosis-related infrastructure incident that caused approximately $1.5 million to $1.8 million in losses, which Gnosis covered, as well as other crypto-sector data breaches reported in 2026.