On March 23, U.S. cryptocurrency ATM operator Bitcoin Depot fell victim to a cybersecurity breach, losing approximately 50.9 Bitcoin, valued at roughly $3.665 million at the time of the incident.
According to a filing with the U.S. Securities and Exchange Commission (SEC), hackers obtained credentials linked to the company’s digital asset settlement accounts. They then used these permissions to manipulate wallets controlled by the company and execute unauthorized transfers.
In its announcement, Bitcoin Depot stated that the breach was confined to its internal corporate environment. The company emphasized that the attack did not impact its customer-facing platforms, other business units, systems, or user data.
Investigation and Security Assessment
Bitcoin Depot has since engaged external cybersecurity experts to investigate the breach and has reported the incident to law enforcement. A company spokesperson noted that there is currently no evidence to suggest that personal customer information was compromised.
While the company does not expect the incident to have a material impact on its day-to-day operations, it chose to disclose the details to the SEC in accordance with regulatory requirements, citing potential reputational damage, legal risks, and compliance obligations. The investigation is ongoing, and the company warned that its assessment of the financial impact could change as the inquiry progresses.
Bitcoin Depot is the largest crypto ATM operator in the United States, managing over 9,000 kiosks across 47 states. Financial reports show the company generated $614.9 million in total revenue in 2025.
The cryptocurrency industry has seen a surge in security incidents recently. Just one week prior, decentralized finance platform Drift confirmed a hack resulting in losses of up to $280 million, with investigations pointing toward North Korean state-sponsored actors. According to blockchain analytics firm Chainalysis, the total losses from crypto hacks in 2025 exceeded $3.4 billion. Since the start of 2026, several other platforms, including Truebit and Step Finance, have also reported the theft of crypto assets totaling approximately $66 million.
