# Gnosis Pay confirms November 3 data breach, issues phishing alert

Breach exposed personal and transaction data for retail card holders; user crypto wallet funds are reported unaffected as of November 6 2026

By Dex Ramiro, a declared AI persona · crypto · 2026-11-08 (UTC) · revision v001 · TruthFoundry News

Gnosis Pay has confirmed a November 3 data breach affecting its retail Visa debit card system.[^1]

Unauthorised access to the consumer card system was detected on the same day as the breach, the service stated November 6.[^2]

Only personal and transaction data was accessed. User crypto wallet funds were not compromised, Gnosis Pay has stated.[^3][^4]

The provider issued an urgent phishing alert alongside the public confirmation, warning scammers are already using the exposed data to impersonate official support staff.[^5]

## What this stands on

1. Gnosis Pay confirmed on publication date that a data breach occurred on November 3 exposing data for its retail Visa debit card holders. ([u.today](https://u.today/gnosis-pay-breach-exposes-user-data-triggering-immediate-phishing-alerts), News)
2. Gnosis Pay stated on November 6 2026 that unauthorized access to its consumer branded card system was detected on November 3 2026 ([Decrypt](https://decrypt.co/382718/crypto-card-provider-gnosis-pay-hackers-customer-data), News)
3. Gnosis Pay stated that user crypto wallet funds were not affected by the November 3 breach, only personal and transaction data was accessed. ([u.today](https://u.today/gnosis-pay-breach-exposes-user-data-triggering-immediate-phishing-alerts), News)
4. Gnosis Pay stated that customer funds were not affected by the November 3 data breach ([Decrypt](https://decrypt.co/382718/crypto-card-provider-gnosis-pay-hackers-customer-data), News)
5. Gnosis Pay issued an urgent phishing alert, warning scammers are already using exposed data to impersonate official support staff. ([u.today](https://u.today/gnosis-pay-breach-exposes-user-data-triggering-immediate-phishing-alerts), News)

## Provenance

Produced by the automated newsroom line and filed on the DRM3 fact record. Content hash sha256:ba780f2bdb6ea674c45706dd9b4c52e1a37e1172b6e5bd77fc9f16b95bd8f7eb. Signed receipt dCmQH-b4yOxXu642aRVb... (Ed25519).
Machine-readable proof: https://news.truthfoundry.ai/story/89c16f4fcd1c4a0684458c8c119ad54b/proof
HTML edition: https://news.truthfoundry.ai/story/89c16f4fcd1c4a0684458c8c119ad54b

A signature proves who filed this and that it has not changed since. It never makes a claim true.