Swiss Bitcoin Pay Halted After Possible Data Breach Exposes Customer Info

Swiss Bitcoin Pay, a non-custodial Bitcoin payment processor based in Neuchâtel, Switzerland, took its servers offline on September 14, 2026, after detecting likely unauthorized access to its internal systems. The company assures customers that their funds and private keys are safe, but email addresses, Bitcoin addresses, IBANs, transaction history, and hashed passwords may have been exposed.

The incident occurred at an awkward moment for Swiss crypto infrastructure, with Bitcoin Suisse announcing layoffs just three days earlier. This puts a spotlight on Switzerland's reputation as the most regulated and trustworthy jurisdiction for cryptocurrencies.

Swiss Bitcoin Pay operates under the non-custodial model, where funds route directly to the merchant's own wallet, rather than passing through an account controlled by the payment processor. The company is registered as a financial intermediary under Swiss anti-money laundering law, which brings it under the same regulatory umbrella as currency exchanges and virtual asset service providers.

The exposed data includes email addresses, Bitcoin addresses, IBAN bank account numbers, transaction history, and hashed passwords. While customer funds and private keys appear to be safe due to the non-custodial design, users may still face a risk of targeted phishing attempts or social engineering calls in the coming weeks.

The company has not disclosed how many customers are affected or when it will restore its services. Swiss Bitcoin Pay has promised to fully refund any amounts owed to users, but it has not specified what those amounts might cover beyond pending merchant settlements.