Gnosis Pay confirmed a data breach exposing full payment card numbers, CVV codes, expiry dates, and personal details including names, addresses, linked wallet addresses, emails, phone numbers, and nationalities. Some users' banking information such as IBAN and BIC were also leaked. The company detected unauthorized access to its legacy consumer card system on November 3 and responded within two hours, confirming that user funds and the enterprise-grade platform remained unaffected. In response, Gnosis Pay replaced compromised credentials and mandated 3D Secure verification for all online card payments until the legacy system is decommissioned on December 20. The total number of affected users has not been disclosed.