Bitcoin Depot, a leading operator of Bitcoin ATM networks, recently filed a report with the U.S. Securities and Exchange Commission (SEC) acknowledging a major security breach. Hackers successfully infiltrated the company’s internal IT systems and siphoned off more than 50 Bitcoin from digital wallets under the company’s control.
According to the disclosure, the attack was first identified on March 23, when Bitcoin Depot’s security team detected suspicious activity within certain IT systems. Although the company immediately initiated emergency containment measures, the attackers had already managed to compromise credentials for digital asset settlement accounts and execute unauthorized transfers.
Internal Systems Compromised as Investigation Begins
In its announcement, Bitcoin Depot stated: "Upon detecting the intrusion, the company promptly activated its incident response protocols, engaged external cybersecurity experts, and notified law enforcement." The company emphasized that the breach was confined to its corporate office environment and did not impact customer platforms, data centers, or user account systems.
While the company holds cyber insurance, it admitted in the filing that current coverage may be insufficient to offset the total losses incurred. Management determined on April 6 that the incident had a material impact, citing concerns over reputational damage, potential litigation, regulatory compliance pressures, and significant emergency response costs.
This is not the first time Bitcoin Depot has faced security challenges. Last year, the company disclosed a 2024 data breach that exposed the personal information of nearly 26,000 users, including names, addresses, dates of birth, driver's license numbers, email addresses, and phone numbers. Similarly, U.S.-based operator Byte Federal reported a breach in December 2024 that affected 58,000 customers.
Bitcoin Depot is currently cooperating with law enforcement on a comprehensive investigation while further fortifying its core system defenses. As of the report's release, the company operates over 25,000 Bitcoin ATMs and BDCheckout service locations globally, with its 2025 fiscal report showing annual revenue of $615 million.