Swiss Bitcoin Pay, a non-custodial bitcoin payment processor based in Neuchâtel, Switzerland, temporarily shut down its servers following a data breach on Monday.
The company said that user funds were safe but that customer email addresses, bitcoin addresses and IBANs, transaction history, and hashed passwords were believed to have been breached. "A malicious user has likely gained access to Swiss Bitcoin Pay's internal systems," the company stated. "As a precaution, we are temporarily shutting down our servers while we investigate and secure our infrastructure."
Swiss Bitcoin Pay added that "user funds are safe, and any amounts owed to users will be fully returned."
The company allows businesses to accept Bitcoin payments through both on-chain transactions and the Lightning Network.
The breach comes as part of a broader wave of security incidents affecting cryptocurrency and fintech firms. Last week, Revolut confirmed that customer passports, driver's licenses, verification selfies, and transaction histories were handed to an unauthorized party following fraudulent requests from a legitimate government agency's email domain. Hardware wallet manufacturer Trezor also warned last week that a data breach at a third-party marketing platform used for newsletters was leading to phishing attacks targeting its customers.
The cryptocurrency sector has experienced multiple significant data breaches in 2026. In January, scammers accessed customer information through crypto wallet Ledger's payment processor Global-e to send phishing emails. Last month, wallet provider SafePal announced a data breach involving unauthorized access to approximately 39,798 customers' order information, including names, addresses, and purchase data.
