Bitcoin Depot Inc. has revealed in an SEC filing that hackers made off with approximately 50.9 BTC, valued at about $3.665 million, from wallets controlled by the company during a security breach on March 23. The breach allowed the attackers to access the company’s IT systems and obtain credentials for digital asset settlement accounts, facilitating unauthorized transfers of cryptocurrency.
In response to the incident, Bitcoin Depot activated its incident response protocols and brought in external cybersecurity experts to investigate the breach and secure remaining assets. The company has also notified law enforcement about the incident, although it has not disclosed which agencies are involved in the investigation.
Despite the significant compromise of its settlement accounts and the resultant financial loss, Bitcoin Depot has assured that its customer-facing platforms and user data remained unaffected. As of now, the company has not issued a public statement regarding the breach, apart from the SEC filing. Efforts to reach a company spokesperson for further comment were unsuccessful.
The company has categorized the incident as material to its operations, highlighting concerns about potential reputational damage alongside the legal, regulatory, and incident response costs associated with the breach. With Bitcoin’s value at the time of the theft taken into account, the company has recorded a preliminary loss estimate of $3.665 million.
The SEC filing did not clarify whether Bitcoin Depot has insurance coverage for digital asset thefts, nor did it detail how this loss might influence its Bitcoin ATM liquidity operations across its network of machines. This breach comes in the wake of increased scrutiny faced by Bitcoin ATM operators, who are often attractive targets for cybercriminals due to the large cryptocurrency reserves they maintain.
This event represents at least the second known security incident involving Bitcoin Depot, following a previous breach in 2023, which resulted in the compromise of personal data for 58,000 users. The evolving landscape of regulatory oversight has led the company to implement stricter identity verification requirements for all transactions at its ATMs.
Following the news of the breach, shares of Bitcoin Depot (BTM) experienced a notable spike of 15% during trading hours, closing at $2.74. However, shares saw a decline after hours post-disclosure, reflecting a 44% drop over the last 30 days. As the investigation unfolds and ramifications emerge, Bitcoin Depot’s financial and operational future remains under scrutiny.
