Bitcoin Depot has reported a significant security breach involving the theft of approximately 50.9 BTC, which translates to around $3.665 million. The breach, which occurred on March 23, enabled hackers to gain unauthorized access to the company’s IT systems, obtaining critical credentials related to digital asset settlement accounts. This unauthorized access facilitated the illicit transfer of cryptocurrency from company-controlled wallets.
In response to the breach, Bitcoin Depot activated its incident response protocols and sought assistance from external cybersecurity experts to investigate the nature of the attack and to secure its remaining assets. The company has also alerted law enforcement about the incident, although specific details regarding the agencies involved in the investigation remain undisclosed.
Despite the security breach that compromised settlement accounts, Bitcoin Depot assured stakeholders that its customer-facing platforms and user data were not affected. As of this moment, the company has not made an extensive public statement about the breach beyond its submission to the SEC. Efforts to obtain comments from a company spokesperson have not yielded immediate responses.
The incident is classified by Bitcoin Depot as material to its operations, hinting at potential reputational damage and the financial implications arising from legal, regulatory, and response costs. A preliminary loss estimate of $3.665 million reflects the value of Bitcoin at the time of the theft.
The SEC filing did not clarify whether Bitcoin Depot has insurance coverage for losses due to digital asset thefts or how this loss might affect its Bitcoin ATM liquidity operations across its extensive machine network. The presence of substantial cryptocurrency reserves required for customer transactions has made Bitcoin ATM operators particularly appealing targets for cybercriminals, who exploit the vulnerabilities inherent in blending physical cash transactions with digital asset custody systems.
This event marks the second known security incident within Bitcoin Depot in recent times; earlier in 2023, hackers managed to access personal data belonging to approximately 58,000 users. The company has also been under increasing regulatory scrutiny, leading to the implementation of more stringent identity verification protocols for all ATM transactions as regulators enhance oversight of the Bitcoin ATM industry.
After the announcement concerning the breach, shares in Bitcoin Depot (BTM) experienced a temporary spike of 15%, closing the trading day at $2.74. However, shares have seen a decline in after-hours trading following the SEC disclosure, and overall, the company’s stock is down 44% over the past month.
