Swiss Bitcoin Pay Suspends Servers Amid Internal System Breach Concerns

Swiss Bitcoin Pay has suspended its entire server infrastructure after confirming possible unauthorized access to its internal systems. The cryptocurrency payment provider stated that customer email addresses, Bitcoin addresses, bank IBANs, transaction histories, and hashed passwords may have been exposed, raising concerns about targeted phishing attacks and secondary damage.

On September 14 (local time), Swiss Bitcoin Pay announced on X (formerly Twitter) that it had identified potential malicious access to internal systems and was temporarily shutting down servers for investigation and infrastructure reinforcement. The company has not yet determined a timeline for service restoration.

The firm confirmed that customer Bitcoin holdings remain secure, with no unauthorized transfers detected and all pending payouts guaranteed. Swiss Bitcoin Pay explained that while the platform operates on a non-custodial structure, it temporarily holds small balances during Lightning Network settlement processes to facilitate on-chain settlements.

Experts warn that the combination of exposed personal data—such as email addresses, IBANs, Bitcoin addresses, and transaction histories—could enable sophisticated phishing or impersonation attacks. The breach also raises concerns about tracking transactions on public blockchains if Bitcoin addresses are linked to specific individuals.

This incident follows a series of recent security breaches in the crypto industry, including Trezor’s exposure of customer names, addresses, and contact details due to a shipping company hack, and SafePal’s leak of approximately 39,800 users’ order information through a plugin vulnerability. Swiss Bitcoin Pay is currently investigating the scope of the breach without linking it to specific vulnerabilities.