Bitcoin Depot

Summary

Bitcoin Depot reported that hackers stole roughly 50.9 bitcoin, valued at about $3.6 million, after obtaining credentials for its digital asset settlement accounts through an intrusion into its corporate IT systems. The company said the breach was confined to its internal environment and did not affect customer platforms or services, though it anticipates reputational, legal, incident response and regulatory costs. A prior data breach exposed personal information of more than 26,000 individuals, including names, contact details, dates of birth, addresses and driver’s license numbers, with disclosure delayed due to a law enforcement investigation. The company recorded a preliminary loss estimate of approximately $3.665 million and said its investigation into the full scope of the incident continues.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On March 23, 2026, Bitcoin Depot detected an intrusion into its IT systems, as disclosed in an SEC filing. The attackers obtained credentials for the company’s digital asset settlement accounts, which allowed them to transfer approximately 50.903 bitcoin from Bitcoin Depot’s wallets. The stolen bitcoin was valued at roughly $3.6 million at the time of the incident. The company stated that the intrusion was confined to its corporate environment and did not affect its customer platforms, divisions, systems, data or other environments.

Bitcoin Depot filed a preliminary estimate of loss of about $3.665 million, representing the fair value of the unauthorized bitcoin transfer as of the detection date. The firm noted that the ultimate financial impact could differ as the investigation continues. While the attack has not caused a material disruption to operations, the company anticipates potential reputational, legal, incident response and regulatory expenses. Bitcoin Depot said its investigation into the full scope of the incident remains ongoing.

The announcement of this theft follows a separate disclosure made in July 2025, when Bitcoin Depot notified more than 26,000 individuals of a data breach that had actually occurred around July 2024. In that earlier incident, attackers accessed files containing personal information such as names, phone numbers, email addresses, dates of birth, physical addresses and driver’s license numbers. The company explained that the public disclosure was delayed by a year due to an ongoing law enforcement investigation. The article also notes that news of the Bitcoin Depot hack appeared just days after a separate attack in which threat actors believed to be operating from North Korea stole approximately $285 million from the DeFi platform Drift.

Sources

Sources available to members: 1 source.