Nayax, a fintech powering cashless payments for vending machines and unattended retail worldwide, is investigating claims by hacking group "The Syndicate" that it stole roughly 1 billion payment card records and other sensitive data. Anyone who has used a card at Nayax-powered machines may be affected. Affected individuals should immediately monitor bank and card statements closely for unauthorized transactions and consider requesting a replacement card.
| Company | Nayax |
|---|---|
| Industry | Finance |
| Data Types Exposed | Payment Card Numbers, Transaction Data, Customer Account Information, Other Business/Operational Data |
| People Affected | Not Publicly Disclosed |
| Attack Method | Unspecified/Unauthorized Access |
| Regulators Notified | Not Publicly Disclosed |
What Happened in the Nayax Data Breach?
Nayax, a global fintech company that powers cashless payment systems for vending machines and other unattended retail devices, is investigating a claimed cyberattack on its network. The company, which trades publicly on both the Tel Aviv Stock Exchange and the Nasdaq, disclosed the situation through a Form 6-K filing with the U.S. Securities and Exchange Commission. This filing signaled to investors and the public that a serious security matter had come to light.
A hacking group calling itself The Syndicate claimed responsibility for the intrusion. According to the group’s own claims, it acquired approximately 1 billion payment card records along with other sensitive company and customer data. However, the exact method the attackers used to breach Nayax’s systems has not been publicly disclosed. As a result, many technical details about the incident remain unclear at this stage.
Nayax’s Form 6-K included an official explanatory statement addressing the situation, which is how the broader public first learned of the potential breach. Because Nayax processes payment transactions for a massive network of unattended retail machines, any confirmed compromise could carry significant consequences. The company has stated it is actively investigating the claims made by the hacking group. In addition, further details are expected to emerge as the investigation continues.
Who was affected?
The population impacted by this incident could be extremely large given the nature of Nayax’s business. The company provides payment infrastructure to vending machines, kiosks, and other self-service retail points around the world. Consequently, both individual consumers who used these payment terminals and business customers who rely on Nayax’s platform could be affected.
At this time, Nayax has not confirmed a specific number of affected individuals. The hacking group’s claim of 1 billion card records has not been independently verified. Therefore, the true scope of affected consumers remains uncertain until Nayax completes its forensic investigation and issues further updates. Because Nayax operates globally, the affected population may include cardholders and customers across multiple countries, potentially including the United States.
What Information Was Potentially Exposed?
The hacking group claims to have obtained an enormous volume of payment card data along with other important company information. While Nayax has not yet confirmed the full scope of exposed data, the nature of its business suggests the categories below are most at risk.
- Payment card numbers and related transaction data
- Customer account information tied to cashless payment terminals
- Potentially other business or operational data referenced by the attackers as
Related Data Breaches