Bitcoin Depot Hit by $3.66 Million Bitcoin Theft in March Cyberattack
Bitcoin ATM operator Bitcoin Depot revealed in a July 8 SEC filing that hackers stole approximately 50.9 Bitcoin valued at $3.66 million during a security breach on March 23. The attackers compromised the company’s IT systems, gaining access to a digital-asset settlement account and executing the unauthorized transfer.
Upon detecting the breach, Bitcoin Depot activated its incident-response protocols, engaged external cybersecurity experts to investigate, and notified law enforcement. While the attack did not impact customer-facing platforms or user data, the company classified the incident as material to its operations, citing potential legal costs and reputational risks.
Bitcoin ATM providers are frequent targets for cybercriminals due to their need to hold digital assets for transaction processing. This incident follows a 2023 data breach at Bitcoin Depot that exposed the personal information of roughly 58,000 users. In response to tightening regulations, the company has since strengthened identity-verification measures for its ATMs.
Source: https://en.bloomingbit.io/feed/news/109556
Bitcoin Depot cybersecurity rating report: https://www.rankiteo.com/company/bitcoin-depot
"id": "BIT1775688045",
"linkid": "bitcoin-depot",
"type": "Breach",
"date": "3/2026",
"severity": "75",
"impact": "2",
"explanation": "Attack limited on finance or reputation"{'affected_entities': [{'industry': 'Cryptocurrency/FinTech',
'name': 'Bitcoin Depot',
'type': 'Company'}],
'attack_vector': 'Unauthorized access to IT systems',
'date_detected': '2024-03-23',
'date_publicly_disclosed': '2024-07-08',
'description': 'Bitcoin ATM operator Bitcoin Depot revealed that hackers '
'stole approximately 50.9 Bitcoin valued at $3.66 million '
'during a security breach on March 23. The attackers '
'compromised the company’s IT systems, gaining access to a '
'digital-asset settlement account and executing the '
'unauthorized transfer.',
'impact': {'brand_reputation_impact': 'Potential reputational risks',
'financial_loss': '$3.66 million',
'legal_liabilities': 'Potential legal costs',
'operational_impact': 'Material to operations',
'systems_affected': 'Digital-asset settlement account'},
'investigation_status': 'Ongoing',
'motivation': 'Financial gain',
'recommendations': 'Strengthened identity-verification measures for ATMs',
'references': [{'date_accessed': '2024-07-08', 'source': 'SEC filing'}],
'response': {'incident_response_plan_activated': 'Yes',
'law_enforcement_notified': 'Yes',
'third_party_assistance': 'External cybersecurity experts'},
'title': 'Bitcoin Depot Bitcoin Theft',
'type': 'Cyberattack'}