Information Regarding a Security Incident at a Logistics Service Provider of TWINT Acquiring AG

A logistics service provider carrying out printing services for TWINT Acquiring AG was affected by a cyberattack.

As part of this incident, letters sent by the service provider on behalf of TWINT to merchants during the past twelve months were exposed. These include letters used to deliver QR code stickers to merchants. The letters contained information such as company names and business addresses. To a lesser extent, merchant registration confirmation letters were also affected; these contained phone numbers and email addresses.

No payment data, login credentials or other particularly sensitive data were exposed. The QR codes contained in the letters cannot be used for fraudulent purposes.

Only a portion of TWINT Acquiring AG merchants is affected. The affected merchants have been informed directly. The investigations into the incident have been completed and the necessary measures have been implemented. The affected service provider has also introduced additional security measures. The secure handling of data is of the highest priority for TWINT. We regret this incident and thank you for your understanding and continued trust.

Further information about the incident can be found on our service provider’s website.

Status as of: 22 October 2026