Bitcoin ATM operator Bitcoin Depot Inc. filed a report with the U.S. Securities and Exchange Commission (SEC) on Wednesday, confirming that the company fell victim to a security breach on March 23. Hackers managed to infiltrate the company’s IT systems, compromised credentials for a digital asset settlement account, and successfully siphoned off 50.9 Bitcoin.
According to the SEC filing, the stolen assets had a market value of approximately $3.66 million. Bitcoin Depot stated that upon discovering the intrusion, it immediately activated emergency response protocols and engaged external cybersecurity experts to investigate, plug the security gaps, and secure remaining assets. The company has also reported the incident to law enforcement.
Customer Data Remains Unaffected
Although internal accounts were directly targeted, Bitcoin Depot emphasized that its customer-facing platforms and user personal data were not impacted by the incident. The company has yet to clarify whether it holds insurance against such digital asset thefts or the specific impact this loss may have on the liquidity of its global ATM network.
In its filing, Bitcoin Depot characterized the hack as a "material event." Beyond the direct financial loss, the company faces risks related to reputational damage, increased regulatory compliance costs, and potential legal action. As of press time, Bitcoin Depot has not responded to requests for comment.
This security incident once again highlights the vulnerabilities within the Bitcoin ATM industry. Because these machines must hold significant reserves of cryptocurrency to facilitate daily transactions, they have become prime targets for cybercriminals. Operators often face unique security challenges when bridging the gap between physical cash handling and digital asset custody.
This is not the first time Bitcoin Depot has faced security threats. In 2023, the company suffered a data breach that exposed the personal information of 58,000 users. Recently, as regulators have intensified scrutiny of the sector, the company has begun implementing stricter identity verification requirements across all ATM transactions.
Following the news, Bitcoin Depot (BTM) shares initially rose 15% during intraday trading, closing at $2.74. However, the stock retreated in after-hours trading following the SEC disclosure. Over the past 30 days, the company's share price has fallen by 44%.
