Company Takes Payment Servers Offline While Investigating Access
Swiss Bitcoin Pay has temporarily shut down its servers after detecting a suspected breach of its internal systems, disrupting a Bitcoin payment service used by merchants while the company investigates the incident and strengthens its infrastructure.
The Switzerland-based payment provider said on Sept. 14 that a malicious user may have gained unauthorized access to internal systems. Information potentially exposed includes customer email addresses, Bitcoin addresses, IBANs, transaction histories and password hashes.
Swiss Bitcoin Pay has not disclosed how many customers may be affected, how the attacker obtained access or whether the potentially accessible information was actually exfiltrated.
The company also has not announced when its servers will return online. It said the infrastructure was taken offline while it investigates the incident and implements additional security measures.
Swiss Bitcoin Pay said customer funds remain safe and that amounts currently owed to users will be returned in full. There is currently no indication that merchant private keys were compromised or that Bitcoin was removed from customers’ self-custody wallets through the incident.
That distinction is important because Swiss Bitcoin Pay operates differently from a conventional custodial cryptocurrency exchange.
The company describes its payment system as non-custodial, with Bitcoin received by merchants ultimately transferred to a wallet controlled by the merchant. Its service supports Bitcoin and Lightning Network payments through a mobile application, online dashboard, e-commerce integrations and an API.
Merchants can choose to keep payments in Bitcoin or have them automatically converted into fiat currency and sent through the banking system. Swiss Bitcoin Pay currently advertises a 1% fee when businesses keep Bitcoin and 1.5% when payments are automatically converted into fiat.
Its self-custodial structure reduces one of the biggest risks associated with a compromise of a cryptocurrency payment company: gaining control of a centralized pool of customer crypto assets.
However, the company’s response also highlights some nuance around that model. According to its explanation following the incident, some user funds may temporarily remain within Swiss Bitcoin Pay’s system because incoming Lightning payments are consolidated into on-chain Bitcoin outputs on a daily, weekly or monthly basis. The company said these generally represent limited amounts and that money owed to customers will be returned.
The potential exposure of payment metadata may therefore be the more significant security issue at this stage.
A database containing customer email addresses alongside Bitcoin addresses, IBANs and transaction records could allow an attacker to connect an individual’s or company’s real-world identity with both bank information and activity visible on the public Bitcoin blockchain.
That combination may also increase the effectiveness of targeted phishing attacks, particularly if an attacker can reference genuine transactions, payment addresses or banking details when impersonating Swiss Bitcoin Pay.
Password hashes were also listed among the information that may have been exposed. A password hash is not the same as a plaintext password, and the practical risk depends on factors including the hashing algorithm, password strength and other protections used by the company. Swiss Bitcoin Pay has not publicly provided those technical details.
The immediate impact extends beyond the data exposure. Taking the servers offline means merchants that depend on Swiss Bitcoin Pay’s application, dashboard, API or e-commerce integrations could face interruptions in accepting or processing Bitcoin payments.
That makes the shutdown an availability problem as well as a cybersecurity problem. Similar incidents affecting Bitcoin infrastructure have shown that keeping assets secure does not eliminate the operational consequences when the systems surrounding those assets have to be suspended.
Swiss Bitcoin Pay was established in Switzerland in 2022 and is based in Neuchâtel. The company markets its platform to businesses seeking to accept Bitcoin without directly managing all of the payment-processing infrastructure themselves.
For now, the most important unanswered questions are the extent of the unauthorized access, whether customer records were copied, what systems were reached and when merchants will regain access to the service.
Non-Custodial Does Not Mean There Is Nothing Valuable to Steal
The encouraging part of this incident is that there is still no evidence that the attacker obtained control over merchants’ Bitcoin wallets.
If that remains true after the investigation, Swiss Bitcoin Pay’s architecture will have done something important: it will have limited the financial blast radius of an internal-system compromise.
But that should not be confused with the breach being harmless.
Crypto companies have spent years emphasizing self-custody as the answer to centralized counterparty risk. That argument is valid when the question is who controls private keys. It becomes much less complete when a payment company also handles identities, email addresses, bank accounts, API credentials and detailed transaction data.
A merchant can change a password after a breach. It can rotate an API key. It can even move future Bitcoin activity to new addresses. What it cannot easily erase is a historical connection between a known identity, an IBAN and an address whose transactions remain permanently visible on a public blockchain.
That makes data exposure potentially more durable in crypto than in many conventional payment breaches.
The incident also creates a reputational challenge for Swiss Bitcoin Pay. Businesses use a payment processor partly because they do not want to build and maintain this infrastructure themselves. Security and availability are therefore core parts of the product rather than secondary technical features.
If accepting Bitcoin requires merchants to tolerate an indefinite service outage after an internal breach, some of the convenience gained from outsourcing the payment layer disappears.
The next disclosure will therefore matter much more than another reassurance that funds are safe. Swiss Bitcoin Pay needs to establish which systems were accessed, whether data was downloaded, whether authentication tokens or API credentials were exposed and how many customers were affected.
It will also be important to know whether the attacker could have created any pathway toward unauthorized transfers, even if no such transfers have been identified so far.
There is a second-order risk as well. Customers should expect any follow-on messages about refunds, password resets or account recovery to receive extra scrutiny. Crypto security incidents routinely create opportunities for impersonators, and compromised customer information can make fake support messages considerably more convincing. Previous attacks involving stolen wallet credentials show how quickly a problem in one layer of the security stack can be turned into an attempt to reach assets somewhere else.
For Swiss Bitcoin Pay, a detailed post-mortem and a controlled return to service would provide the clearest evidence that the incident has been contained.
The non-custodial design may have protected the most valuable thing in the system: the Bitcoin itself. The breach is nevertheless a reminder that modern crypto payment companies have another valuable asset sitting behind their wallets — the data connecting people, bank accounts and blockchain activity together.
Shane Neagle is a financial markets analyst and digital assets journalist specializing in cryptocurrencies, memecoins, prediction markets, and blockchain-based financial systems. His work focuses on market structure, incentive design, liquidity dynamics, and how speculative behavior emerges across decentralized platforms.
He closely covers emerging crypto narratives, including memecoin ecosystems, on-chain activity, and the role of prediction markets in pricing political, economic, and technological outcomes. His analysis examines how capital flows, trader psychology, and platform design interact to create rapid market cycles across Web3 environments.
Alongside digital assets, Shane follows broader fintech and online trading developments, particularly where traditional financial infrastructure intersects with blockchain technology. His research-driven approach emphasizes understanding why markets behave the way they do, rather than short-term price movements, helping readers navigate fast-evolving crypto and speculative markets with clearer context.