Gnosis Pay Data Breach: Customer Info Exposed, Funds Safe

The Gnosis Pay data breach exposed customer information, but the company says funds were not affected. Decrypt reports that Gnosis Pay detected unauthorized access on November 3. U.Today also reports the breach and the phishing warnings that followed.

What the Gnosis Pay data breach touched

The affected system powers Gnosis Pay’s own branded cards, its consumer business. Decrypt says that platform was already due to retire on December 20. The enterprise platform, which runs white-label card programs for fintech firms, wallets and neobanks, was not affected.

Gnosis Pay has not said how many customers were hit or exactly what data was taken. It says it emailed each affected customer with details. Therefore, we cannot tell you the scale. U.Today says the issuer, Monavate Limited, continues to operate.

What Gnosis Pay says it did

Monitoring caught the access on November 3, and containment began within two hours, per Decrypt. The company replaced the compromised security credentials and fixed the vulnerability. It made 3D Secure, an extra verification step, mandatory for all online card payments. It has also reported the breach to its partners, its card issuer and data protection authorities.

Gnosis Pay wrote on X: “While funds were not affected, the security of personal information is just as important and we take full responsibility.”

The phishing risk after a data breach

Stolen purchase details and addresses make scams believable. Both outlets say Gnosis Pay warned customers to distrust unexpected messages, even ones with real personal details. It says it will never ask for seed phrases, PINs or full card numbers, or ask users to move funds. It also told customers to be careful about sharing their address or crypto holdings.

That last warning matters. Decrypt cites Chainalysis saying physical attacks on crypto holders, including home invasions and kidnappings, were on pace for a record year after more than $30 million was stolen in the first half of 2026. Decrypt also lists other recent incidents, including a suspected $87 million drain that Ledger traced to devices bought from one reseller. For exchange custody, see our piece on Coinbase and cold storage.

Miner math: what a security scare does to your margin

Here is the live maths on November 6. Bitcoin is $75,716 and the network is 1039 EH/s, so hashprice is about $33.07 per petahash per day. That is what one PH/s of hashing earns before power.

Numbers are profit per day after electricity, at the three power prices shown. Break-even is the most you can pay per kilowatt-hour before the machine loses money. Specs are the manufacturer ratings; network data comes from mempool.space. Try your own power price in our free bitcoin mining profit calculator. See what these machines really sold for in our used ASIC miner price index. Want to run the same numbers on a machine you can buy today? See our used ASIC miners, or buy several at once through bulk lots.

This is not a hashrate event, so test the risk that matters: if bitcoin falls 3%: the break-even power price on an S19k Pro falls from 6.0 to 5.8 cents per kilowatt-hour. At 8 cents, daily profit goes from -$1.28 to -$1.39.

The blunt answer for miners

This breach does not change hashprice. Network hashrate is near 1039 EH/s per mempool.space, and the table above decides who makes money. However, miners hold real coin balances, and miners get targeted. We would keep mining payouts in your own wallet and keep your address and balance private.

If your machines are under water at your power price, see our we buy used miners page, or browse all miners.

-Nick
ING Mining

This is general information, not financial advice. Crypto is volatile, and exchanges can fail. Please do your own research.

How this story was made: drafted with the help of AI tools from public sources, then edited by Nick Squires. See our editorial policy. Spot an error? Email ns@ingmining.com.