Bitcoin Depot Hit by $3.66 Million Bitcoin Theft in March Cyberattack Bitcoin ATM operator Bitcoin Depot revealed in a July 8 SEC filing that hackers stole approximately 50.9 Bitcoin valued at $3.66 million during a security breach on March 23. The attackers compromised the company’s IT systems, gaining access to a digital-asset settlement account and executing the unauthorized transfer. Upon detecting the breach, Bitcoin Depot activated its incident-response protocols, engaged external cybersecurity experts to investigate, and notified law enforcement. While the attack did not impact customer-facing platforms or user data, the company classified the incident as material to its operations, citing potential legal costs and reputational risks. Bitcoin ATM providers are frequent targets for cybercriminals due to their need to hold digital assets for transaction processing. This incident follows a 2023 data breach at Bitcoin Depot that exposed the personal information of roughly 58,000 users. In response to tightening regulations, the company has since strengthened identity-verification measures for its ATMs.

Bitcoin Depot Hit by $3.6M Crypto Heist in Sophisticated Cyberattack Bitcoin Depot, a major operator of cryptocurrency ATMs and a publicly traded company on the New York Stock Exchange, confirmed a significant cyberattack resulting in the theft of 50.9 Bitcoins valued at approximately $3.6 million. The breach targeted the company’s digital accounts rather than its physical ATMs, with attackers gaining access to master wallet keys and draining funds within minutes. The unauthorized transfer was detected on March 23, though blockchain investigator ZachXBT suggests the theft may have occurred earlier. He identified 19 suspicious wallet addresses linked to the incident as early as March 20, raising concerns that the total loss could exceed the reported amount potentially reaching 54 Bitcoins (nearly $3.9 million). The delay in detection has drawn scrutiny, with ZachXBT noting it took Bitcoin Depot three days to realize the funds were missing. While no group has been officially attributed to the attack, the modus operandi aligns with tactics used by North Korean APT groups, particularly Lazarus, which has a history of targeting crypto platforms to fund regime activities. The incident follows a similar high-profile heist earlier this year, where hackers stole $286 million from the cryptocurrency exchange Drift Protocol. The investigation remains ongoing, with authorities yet to confirm the perpetrators. The breach underscores the persistent vulnerabilities in digital asset management, even among publicly traded firms.

Bitcoin Depot Suffers Major Breach, Losing 50.9 BTC in Cryptocurrency Theft Bitcoin Depot, the world’s largest operator of Bitcoin ATMs, confirmed a significant security breach on March 25, 2025, resulting in the theft of 50.9 BTC (approximately $3.2 million at the time). The incident has raised concerns about the security of cryptocurrency ATM networks and the broader digital asset ecosystem. The breach allowed attackers to gain unauthorized access to Bitcoin Depot’s systems, siphoning the funds before detection. The company has since launched a full investigation, collaborating with law enforcement and cybersecurity experts to trace the stolen assets and identify the perpetrators. In a statement, Bitcoin Depot CEO Nick Spanos acknowledged the severity of the incident, emphasizing the company’s commitment to strengthening security measures and recovering the lost funds. The breach underscores vulnerabilities in cryptocurrency infrastructure, particularly for high-volume operators like Bitcoin Depot, which maintains a network of ATMs across the U.S. and Canada. The company has pledged to implement additional safeguards to prevent future attacks, though details on the attack vector and potential customer impact remain undisclosed. The incident serves as a reminder of the ongoing risks facing decentralized financial systems.

Bitcoin Depot, a company operating the largest global network of bitcoin ATMs, experienced a cyberattack about one year ago. The breach resulted in the leak of sensitive data from 26,732 people, including names, phone numbers, addresses, emails, and driver's license numbers. The company completed its investigation on July 18, 2024, but delayed notifying affected customers until law enforcement finished its own inquiry. Identity theft protections were not offered to victims as Social Security numbers were not involved. The breach highlights ongoing concerns about the security of cryptocurrency ATMs.

Federal Judge Poised to Narrow Bitcoin Depot Data Breach Lawsuit A federal judge in the Northern District of Georgia indicated on March 2, 2026, that he is likely to reduce the scope of claims in a lawsuit against cryptocurrency ATM operator Bitcoin Depot, stemming from a 2024 data breach that exposed the personal information of tens of thousands of U.S. customers. The case, heard in the U.S. District Court for the Northern District of Georgia, centers on allegations that Bitcoin Depot failed to adequately protect customer data, leading to the compromise. While the judge has not yet issued a final ruling, his remarks suggest that some claims may be dismissed or limited as the litigation progresses. The breach, which occurred in 2024, highlights ongoing risks in the cryptocurrency sector, where operators handling sensitive financial and personal data remain prime targets for cyber threats. The outcome of this case could set precedents for how similar incidents are litigated in the future.