Contractors compromised the security system for cards, enabling unauthorised wallet creation and laundering of funds through cryptocurrency.