Must have found a processor willing to take the risk. Or they lied about the business they're in to their processor. There's a company called eMerchantBroker who seems willing to provide licensed dispensaries with standard card processing services.

https://www.cardpaymentoptions.com/credit-card-processing/ma...