On December 16, 2024, the Vermont Office of the Attorney General disclosed a security breach affecting Byte Federal, a cryptocurrency ATM operator. The incident occurred on November 18, 2024, when an unauthorized bad actor exploited a third-party software vulnerability to gain access to the company’s systems. The breach exposed customer personal information, including names, birthdates, and Social Security numbers. While the data was potentially accessed, there is no current evidence that the information was misused, stolen, or compromised in a way that led to fraud or financial harm. The attack was attributed to a vulnerability in external software rather than a direct breach of Byte Federal’s core infrastructure. The company has not confirmed whether ransomware was involved, and no operational disruptions or broader systemic impacts were reported. Authorities and Byte Federal are likely investigating the scope of the exposure and implementing measures to prevent future incidents.

The Maine Office of the Attorney General reported a data breach involving Byte Federal Inc. on December 11, 2024. The breach, which was discovered on November 18, 2024, occurred on September 30, 2024, and involved an external system breach (hacking) affecting a total of 58,000 individuals, including 111 residents from Maine. The compromised information included customer personal details such as names, birthdates, addresses, phone numbers, and social security numbers.