Gnosis Pay Data Breach Leaks Card and Wallet Info
A crypto debit card provider called Gnosis Pay reportedly leaked card numbers, home addresses and linked wallet details. Anyone who taps a crypto card expects privacy, so a breach like this turns a spending tool into a map of your holdings.
What actually happened
According to CoinDesk, published on 7 November 2026, a Gnosis Pay cardholder said the breach connected his home address and card number to every wallet tied to his account. The user told CoinDesk that combination makes targeted scams easier, since attackers could match a real name and address to visible on-chain balances. Gnosis Pay issues debit cards that spend crypto directly from linked wallets. The report does not say how many accounts were hit, when the breach happened, or how the data was accessed. Gnosis Pay has not issued a public statement in the material reviewed.
How we got here
Crypto debit cards work by tying a verified identity to one or more wallets, so a card can spend on-chain funds like a normal bank card. That convenience creates a single point of failure. Earlier exchange breaches mostly leaked emails or trading history. This case reportedly bundles home addresses, card numbers and wallet addresses together, a combination that strips away the pseudonymity many crypto users rely on. Separate wallets and bank cards usually keep identity and holdings apart. A provider database breach erases that separation in one event.
Why this matters for you
For everyday wallet users, this is a reminder that linking a real identity to a wallet removes any privacy cushion. Gnosis Pay cardholders should watch card statements closely and treat unexpected calls or messages about their account with suspicion. For anyone using a crypto card inside an app like bonuz, it is worth checking what data the provider stores and whether wallet links are kept separate from personal details. Builders face pressure to encrypt or avoid storing card numbers and wallet addresses in the same database, since that pairing is now a proven target.
The bigger question
Should crypto card providers keep a stored link between identity and wallet address at all, or verify that link only at the moment of payment, without saving it? How issuers answer will decide how much personal risk comes attached to spending crypto like cash.
What to watch
No official statement from Gnosis Pay appears yet. Watch for the company to confirm how many accounts were affected, when the breach occurred, and whether it reissues cards. bonuz.market will track how other crypto card issuers respond, since the same identity-wallet link underpins many planned smart glasses and wearable payment tools.
