From the night of October 13 to October 14, 2026, a third party gained unauthorized access to our non-production environment. So far, we have found no leak of credit card information.
What we have confirmed so far
- Our investigation so far has found no leak of credit card information.
- API credentials and transaction information of some merchants may have been viewed.
- Email addresses of consumers associated with merchants may have been viewed. In most cases only the email address was involved; a very small number also included a name or phone number.
- No secondary damage, such as fraudulent payments, has been confirmed at this time.
For the background and the actions we have taken, please see Unauthorized Access to Our Systems and Impact on Payment Services. We sincerely apologize for the concern and inconvenience this has caused.