Swiss Bitcoin Pay Shuts Down Servers After Data Breach
Bitcoin Magazine Swiss Bitcoin Pay Shuts Down Servers After Data Breach Another day, another data breach. Swiss Bitcoin Pay, a non-custodial bitcoin payment processor, said that it had to temporaril...
Swiss Bitcoin Pay had to take servers down on Monday after customer data was breached.
Swiss Bitcoin Pay, a non-custodial bitcoin payment processor, said that it had to temporarily shut down its servers following a data breach on Monday.
The Neuchâtel, Switzerland-based company said that user funds were safe but customer email addresses, bitcoin addresses and IBANs, transaction history, and hashed passwords were believed to be breached.
A malicious user has likely gained access to Swiss Bitcoin Pay’s internal systems. As a precaution, we are temporarily shutting down our servers while we investigate and secure our infrastructure.At this stage, we believe they may have accessed customer email addresses, Bitcoin…
The announcement comes amid a run of breaches hitting bitcoin and fintech firms. Revolut confirmed last week that it handed customer passports, driver’s licenses, verification selfies and transaction histories to an unauthorized party that sent fraudulent requests from a legitimate government agency’s email domain.
And top hardware wallet manufacturer Trezor last week warned that a data breach at the third-party marketing platform it uses for sending newsletters was leading criminals to target customers with phishing attacks.
“A malicious user has likely gained access to Swiss Bitcoin Pay’s internal systems …As a precaution, we are temporarily shutting down our servers while we investigate and secure our infrastructure.” Swiss Bitcoin Pay said on Monday.
The company added that; “User funds are safe, and any amounts owed to users will be fully returned.”
Swiss Bitcoin Pay did not immediately respond to Bitcoin Magazine’s request for comment.
The company lets businesses accept Bitcoin payments quickly and easily using both on-chain transactions and the Lightning Network.
Criminals have increasingly been targeting data in 2026. Scammers in January were able to get hold of customer information via crypto wallet Ledger’s payment processor Global-e to send phishing emails.
Crypto wallet provider SafePal last month also announced a data breach that involved unauthorized access to about 39,798 customers’ order information, including personal details such as names, addresses and purchase data.
Asanat Analysis — Why it matters
Swiss Bitcoin Pay's breach is notable primarily for what wasn't compromised: user funds remained secure due to the company's non-custodial architecture, where private keys stay client-side. This distinction matters because it demonstrates how custody model design functions as a breach firewall—a lesson repeatedly validated across 2026's wave of crypto security incidents. However, the exposed data (email addresses, bitcoin addresses, IBANs, transaction history) creates significant second-order risks: criminals now possess mapping between real identities and on-chain activity, enabling targeted phishing, social engineering, and blockchain deanonymization attacks.
The incident fits a clear 2026 pattern: breaches have shifted from targeting custodial holdings (the existential threat) to harvesting identity and transaction metadata from payment processors, wallet makers, and fintech platforms. Ledger's Global-e compromise, Revolut's verification document leak, SafePal's customer data exposure, and now Swiss Bitcoin Pay all follow this pattern. For the sector, this signals that operational security at service layer companies has become the actual attack surface, since modern wallets and exchanges increasingly separate funds custody from data management. The temporary shutdown response—while prudent—also reflects how crypto infrastructure still lacks the incident response playbooks that traditional finance has developed over decades.