Swiss Bitcoin Pay Takes Servers Offline After Suspected Internal Systems Breach

Swiss Bitcoin Pay has temporarily shut down its servers after a suspected unauthorized actor gained access to its internal systems, potentially exposing customer contact, banking and transaction information.

The Bitcoin payments provider disclosed the security issue on September 14 and said user funds remain safe while it investigates the access and secures its infrastructure. The company has not announced when its services will return.

Emails, Bitcoin Addresses and IBANs May Be Exposed

The potentially accessed information includes customer email addresses, Bitcoin addresses, IBANs, transaction histories and hashed passwords. The investigation has not yet established whether additional categories of information were reached.

Swiss Bitcoin Pay has not disclosed how many accounts may be affected, when the unauthorized access began or whether data was copied from its systems. It has also not identified the access method or the party responsible, leaving the technical cause open while the investigation continues.

The combination of email addresses, transaction histories and financial identifiers could give an attacker detailed information for targeted impersonation or phishing attempts. Similar risks emerged after a recent Trezor customer-data breach exposed contact and shipping records belonging to tens of thousands of hardware-wallet buyers.

Swiss Bitcoin Pay Uses a Non-Custodial Payment Model

Swiss Bitcoin Pay operates a merchant payments service supporting Bitcoin transactions through Lightning and onchain payments. Its merchant system is designed to transfer received Bitcoin to wallets controlled by customers rather than retain the assets under long-term company custody.

Merchants can accept payments through the mobile application, web dashboard, e-commerce integrations and an API. Swiss Bitcoin Pay also supports automatic conversion of Bitcoin receipts into fiat for customers using bank payouts, which requires banking information such as IBANs.

The company’s disclosure separates the suspected systems access from customer-fund custody and states that funds remain safe. It has not published evidence of unauthorized Bitcoin transfers or identified a loss amount connected to the intrusion.

Servers Remain Offline During Security Review

Swiss Bitcoin Pay took its infrastructure offline as a precaution rather than continue operating while the extent of the access is being determined. The company has not published a technical root cause, remediation timeline or service-by-service restart schedule.

The disclosure follows other customer-data security cases in the crypto sector, including a recent SafePal order-data exposure involving 39,798 customers. SafePal traced that separate case to an authorization flaw in an order-tracking plug-in, while Swiss Bitcoin Pay has not yet attributed its suspected compromise to a particular application, dependency or vulnerability.

Swiss Bitcoin Pay remains offline with no reopening date. The company said any amounts currently owed to users will be returned in full while it works to secure the affected infrastructure.

The post Swiss Bitcoin Pay Takes Servers Offline After Suspected Internal Systems Breach appeared first on Crypto Adventure.