Bitcoin Depot, one of the world’s largest operators of Bitcoin ATMs, has revealed that attackers stole roughly $3.665 million in Bitcoin after breaking into its systems last month.
The company, which runs more than 25,000 Bitcoin ATMs and BDCheckout locations globally and reported $615 million in revenue in 2025, said it discovered the breach on March 23 after noticing suspicious activity across parts of its IT environment.
According to a filing with the U.S. Securities and Exchange Commission, the attackers managed to access internal systems and steal credentials tied to digital asset settlement accounts. Before the company could fully shut them out, the intruders transferred over 50 Bitcoin from Bitcoin Depot’s wallets.
Bitcoin Depot stated that it immediately activated its incident response protocols, brought in external cybersecurity experts, and alerted law enforcement as soon as the breach was detected. The company emphasized that the attack was contained within its corporate systems and did not impact customer platforms, user data, or operational environments.
Despite the swift response, the financial impact is significant. The stolen 50.903 Bitcoin was valued at approximately $3.665 million at the time of reporting. While the company does carry cyber insurance, it acknowledged that the coverage may not fully offset the losses tied to the incident.
By April 6, Bitcoin Depot determined the breach was material, citing potential consequences such as reputational damage, legal exposure, regulatory scrutiny, and ongoing response costs.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
This is not the first security issue the company has faced. In 2024, it disclosed a separate data breach that affected nearly 26,000 individuals, exposing sensitive personal information, including names, addresses, birth dates, driver’s license numbers, emails, and phone numbers.
