It seems that at some point Bambora has updated the Payments, Reporting, Payment Profile, and Tokenization APIs. In particular they now require Payment Profile Card requests (Add and Update) to contain a card key.
Currently the requests return back the following:
{
"code": 19,
"category": 3,
"message": "Customer information failed data validation",
"reference": null,
"details": []
}
** (some details into the error codes)