01THE HOUR
03:29
Friday 6 February 2026. Lake Mary, Florida. Reconstructed to the hour from BridgePay status updates.
At 03:29 on a Friday morning, BridgePay's monitoring systems logged degraded performance across the company's gateway, virtual terminal, reporting and API platforms. The failures were appearing across every service the company operated, and there was no public notice yet.
BridgePay, headquartered in Lake Mary, Florida, processed roughly 40 million card transactions a month through gateway systems that sat between the merchant's terminal and the card network, accepting each transaction and relaying it for authorisation. That Friday morning, the card networks were running. The relay between them was not.
02THE SEQUENCE
6 February 2026, 03:29 ESTMonitoring systems detected degraded performance across BridgePay's gateway, virtual terminal, reporting and API platforms.
6 February 2026, 05:48 ESTBridgePay posted its first status update confirming a system-wide outage. No estimated resolution time was given.
6 February 2026, 06:34 ESTBridgePay identified the event as a cybersecurity incident. Investigation began with internal teams, external specialists and the FBI. No restoration timeline.
6 February 2026, noon ESTSystems remained unavailable. BridgePay confirmed collaboration with a U.S. Secret Service forensic team.
6 February 2026, 19:08 ESTBridgePay confirmed ransomware as the cause. Initial forensics indicated no payment card data was compromised. The accessed files had been encrypted, with no evidence of usable data exposure.
6 February 2026City of Frisco, Texas and City of Palm Bay, Florida reported nationwide service disruption affecting utility billing payment portals. Frisco's IVR phone system was also affected. BridgePay's full service list was down: BridgePay Gateway API (BridgeComm), PayGuardian Cloud API, MyBridgePay virtual terminal and reporting, hosted payment pages, and PathwayLink gateway and boarding portals.
9 February 2026Day three. BridgePay services remained entirely offline. Bryan Texas Utilities, serving roughly 70,000 customers, reported credit card payments unavailable and suspended late fees and disconnections; kiosks at H-E-B locations, the Bryan Development Center drive-through and the BTU drive-through still accepted credit cards, cash and checks.
10 February 2026Day four. Denton, Coppell and Frisco in North Texas, plus Bryan and San Angelo water utilities, reported continuing outage. Denton suspended late fees until 13 February, later extended to 23 February.
11 February 2026City of Palm Bay updated: utilities customers could now make online payments using credit or debit cards. Phone payments remained unavailable.
12 February 2026BTU restored credit card payments by switching to a new third-party payment processing vendor, bypassing BridgePay entirely. Six days after the outage began. Autopay customers missed during the outage were to be processed on 17 February.
13 February 2026City of Marietta, Georgia posted notice that the attack was impacting "hundreds of municipalities across the United States." A reporting outlet separately described BridgePay as working with dozens of local governments. No confirmed total count was published.
16 February 2026Ten days, and BridgePay services were still unavailable. Frisco remained without its utility payment portal; the city suspended late fees and shutoffs.
5 March 2026City of Frisco utility payment system came back online. Twenty-seven days after the outage began.
03THE HIDDEN DEPENDENCY
Contemporaneous reporting established that the Visa and Mastercard networks continued to operate without disruption on 6 February and in the days following. What broke was the layer between the merchant's terminal and the network: the payment gateway that accepted each transaction from the point of sale, formatted it and relayed it to the acquirer for authorisation.
When ransomware encrypted BridgePay's systems, that relay vanished. The failure sat entirely in the gateway layer.
For municipalities the same dependency took a different shape. Online payment portals for utility bills were hosted through BridgePay's infrastructure. The bill was still due, and the collection channel was gone.
The bill was still due, and the collection channel was gone.
04WHAT STILL WORKED
CASH AND CHECK AT MUNICIPAL OFFICES
Cities including Frisco, Denton and Palm Bay directed residents to pay in person at city hall or by mailed check. Frisco listed walk-in payments Monday through Friday and a drop box behind City Hall.
RETAIL KIOSKS ON SEPARATE GATEWAYS
BTU customers could pay by credit card, cash or check at kiosks in H-E-B stores and city drive-throughs. Those kiosks routed through a separate gateway.
BANK-INITIATED DIRECT DRAFT
Recurring payments initiated through the customer's own bank rather than through BridgePay continued to process during the outage.
05CONTESTED
CONTESTED
6 February 2026
BridgePay stated on 6 February that the event was not a credit card data breach and that accessed files were encrypted, with no evidence of usable data exposure.
At least one affected restaurant described the disruption to its customers as a cybersecurity breach in its card processor. The city of Denton used the term cyber incident in public communications rather than naming ransomware. The distinction was operational: the failure was one of availability, not of data exposure, but the word "breach" appeared in merchant descriptions all the same.
06THE PATTERN LIBRARY
1When one retail withdrawal channel closes or fails, demand concentrates on whichever channel is left open, and the capacity of that channel sets what a depositor can obtain.
Observed: Northern Rock 2007, Cyprus 2013, India 2016, Greece 2015, United States 1933, Argentina 2001, Lebanon 2019, Worldpay 2026, TSB 2018, Afghanistan 2021, Nigeria 2023, Square 2023, United States 2025, Fiserv 2025.
2A currency replacement can require physical work on every unit of the estate before the new money can circulate, whether a modification to each cash dispensing machine or a stamp affixed to each note, so the changeover proceeds piece by piece rather than all at once.
Observed: India 2016, Czechoslovakia 1993.
3Withdrawal limits imposed on a domestic banking system can be written to exempt cards issued outside it, so one machine dispenses under two rules according to where the card was issued.
Observed: Greece 2015.
4Domestic payment and deposit channels can continue operating while cross-border payment routes fail, with the central bank standing in as the intermediary for payments to and from the country.
Observed: Iceland 2008, Germany 1931.
5When the institutions that convert payment instruments into cash are closed, wages and checks already received cannot be spent, and merchants and carriers extend their own credit in place of the missing conversion.
Observed: United States 1933.
6A public employer short of the national currency can pay wages in an instrument it issues itself, which then circulates alongside the currency it stands in for.
Observed: Argentina 2001, United Kingdom 1914.
7Withdrawal restrictions can be imposed by individual institutions and their trade association rather than by statute, so the limit differs from bank to bank and no law governs it.
Observed: Lebanon 2019.
8A cash withdrawal ceiling is paid only in the denominations the machine is permitted to hold, so a ceiling and a denomination rule set together decide how many notes a withdrawal is, and a ceiling has to be raised alongside the denominations that pay it when the existing notes no longer carry it.
Observed: Zimbabwe 2008, Nigeria 2023, Venezuela 2018.
9A payment outage can hit card authorisation and merchant funding as separate faults, so acceptance at the terminal is restored while the money owed to the merchant arrives a day late under its own incident notice.
Observed: Worldpay 2026.
10A retailer that loses electricity can go on trading by taking cash and rationing goods by hand, so the counter outlasts the checkout system that normally prices and settles the basket.
Observed: Texas 2021.
11A systems migration can leave account records readable but wrong, including presenting one customer's account to another, so a working login is no guarantee that the balance on the screen belongs to the person reading it.
Observed: TSB 2018.
12The size of a card processing failure can be counted twice, once on first attempts and once after the same card was presented again, and the second count can be about half the first, so part of the recovery runs through the cardholder at the till.
Observed: Visa Europe 2018.
13A restriction on access to money can be written by purpose as well as by amount, so a balance that cannot be drawn in general becomes payable when it is used for wages, taxes or relief, and the test applied is what the money is for.
Observed: Germany 1931, Brazil 1990.
14A deposit freeze can be paired with a transferable certificate issued against the frozen balance, so the deposit becomes a claim that can be sold before it is released, at a price the market sets rather than its face value.
Observed: Ecuador 1999, Argentina 2002.
15A per head issue of a new currency can be distributed through the administration that issues food rations rather than through the banks, so the ration card is the proof of entitlement and the banks are used to collect the old money rather than to pay out the new.
Observed: Germany 1948.
16When the persons under sanction become the governing institutions of a country, the prohibition reaches ordinary payments that merely touch the state, and access is restored by successive general licences written by activity, so what decides whether a payment can be made is which licence it falls under.
Observed: Afghanistan 2021.
17One foreign currency can carry more than one price at the same moment inside a single country, the authority setting them by the use the money is put to or by the date a balance was credited, while another price goes on being made outside the official ones.
Observed: Lebanon 2019, Mexico 1982, Egypt 2016.
18A payment abroad can be made conditional on prior approval by a committee working to a ceiling set for the whole country each day, so what a firm can pay turns on the capacity of the approval process rather than on the balance in its account.
Observed: Greece 2015.
19Scarce foreign exchange can be rationed through the commercial banks under published guidelines, with the central bank selling only the net requirement at a daily auction and checking compliance through reporting after the fact rather than approving each payment in advance.
Observed: Iceland 2008.
20A payment instrument issued by a bank in a country under strain can be valid and unusable at the same time, because the counterparty abroad requires a second bank to confirm it, so the trade stops at the confirmation rather than at the instrument.
Observed: Sri Lanka 2022.
21Notes of a single currency can trade against one another at a discount according to denomination, so the same sum is worth more or less depending on which note it is held in.
Observed: Iraq 2003.
22A compulsory conversion of deposits can be narrowed by further instruments after it is already in force, so what the measure finally takes is settled by the exceptions rather than by the decree that announced it.
Observed: Argentina 1990.
23The administration that rations a currency held at an official price can be dismantled in the same announcement that frees the price, so the list of who may buy and the queue behind it end on the day the rate is let go.
Observed: Egypt 2016.
24An instrument made for remitting money rather than circulating can be declared legal tender in an emergency because a stock of it already exists in small denominations, after which the office that issues it pays it out in place of coin and declines to give change.
Observed: United Kingdom 1914.