Bitcoin payment service provider Swiss Bitcoin Pay has stated that a malicious user has likely gained access to its internal systems, and the company has classified this incident as a security event that requires immediate action.

As a precaution, Swiss Bitcoin Pay has temporarily shut down all its servers to cut off further access by the attacker and to allow the team to focus on investigating the extent of the breach and protecting the underlying infrastructure.

The company disclosed that the information that may have been accessed includes customer email addresses, Bitcoin receiving addresses, IBAN bank account numbers, historical transaction records, and hashed user passwords; the company also stated that it cannot yet confirm whether other categories of data were accessed, and the investigation is still in its early stages.

Regarding the security of funds, Swiss Bitcoin Pay has made it clear that user funds themselves have not been affected, and all amounts owed to users will be fully refunded, attempting to distinguish between "system data being accessed" and "user asset loss" in external communications.

As of now, the company has not provided a specific date for when the servers will be back online, and the team is working hard to complete security enhancements; the timeline for service restoration will depend on the progress of these enhancements and investigations.

In terms of subsequent impact mechanisms, this is purely a security incident driven by security concerns rather than market trading: in the short term, the trust of Swiss Bitcoin Pay's merchants and users is under pressure, especially if email addresses and IBAN information are actually leaked, which could be used for subsequent phishing emails or social engineering attacks, posing a risk of transmission to users; similar Bitcoin payment service providers may take on some merchant demand that shifts due to trust concerns during this period.

Source: Public Information