Bitcoin Depot, a company operating the largest global network of bitcoin ATMs, experienced a cyberattack about one year ago. The breach resulted in the leak of sensitive data from 26,732 people, including names, phone numbers, addresses, emails, and driver's license numbers. The company completed its investigation on July 18, 2024, but delayed notifying affected customers until law enforcement finished its own inquiry. Identity theft protections were not offered to victims as Social Security numbers were not involved. The breach highlights ongoing concerns about the security of cryptocurrency ATMs.
Source: https://therecord.media/bitcoin-depot-cryptocurrency-atm-company-data-breach
TPRM report: https://scoringcyber.rankiteo.com/company/bitcoin-depot
"id": "bit537071025",
"linkid": "bitcoin-depot",
"type": "Breach",
"date": "7/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 26732,
'industry': 'Cryptocurrency',
'location': 'Atlanta',
'name': 'Bitcoin Depot',
'type': 'Company'}],
'data_breach': {'number_of_records_exposed': 26732,
'personally_identifiable_information': True,
'type_of_data_compromised': ['name',
'phone number',
'address',
'email',
"driver's license number"]},
'date_publicly_disclosed': 'August 2025',
'description': 'Cryptocurrency ATM company Bitcoin Depot reported that more '
'than 26,000 people had sensitive data stolen during a '
'cyberattack about one year ago.',
'impact': {'data_compromised': ['name',
'phone number',
'address',
'email',
"driver's license number"]},
'investigation_status': 'Completed',
'references': [{'source': 'Regulatory filings in Maine and Massachusetts'}],
'regulatory_compliance': {'regulatory_notifications': ['Maine',
'Massachusetts']},
'response': {'law_enforcement_notified': True},
'title': 'Bitcoin Depot Data Breach',
'type': 'Data Breach'}