The crypto ATM operator stored the leak quiet for over a yr, citing federal procedures and legislation enforcement investigations.
Based on a latest submitting with the Maine Legal professional Normal’s workplace, the breach was first detected on June 23, 2024, when Bitcoin Depot recognized suspicious exercise on its data programs. The agency deployed an investigation in response, participating third-party safety consultants to find out the extent of the breach.
On July 18, 2024, the investigation confirmed {that a} hacker had accessed paperwork containing the private information of 26,732 clients. The stolen data included names, telephone numbers, and driver’s license numbers. In some instances, it additionally included residence addresses, start dates, and e mail addresses.
Bitcoin Depot stated it was unable to inform affected customers earlier as a consequence of an ongoing federal investigation. The disclosure maintain was solely lifted on June 13, 2025, when legislation enforcement confirmed that their investigation had concluded.
The corporate emphasised that there is no such thing as a proof up to now that the uncovered information has been misused, and is providing assist to affected people. It has additionally carried out new safety measures, improved system monitoring, and elevated inner consciousness to assist forestall future incidents.
Customers are suggested to remain vigilant over the subsequent 12 to 24 months and urged to observe monetary accounts, assessment credit score studies, and report any suspicious exercise or indicators of id theft instantly.
The breach comes amid a wave of focused assaults on crypto service suppliers, as menace actors proceed to evolve their ways to prey on unsuspecting people and entities. It echoes an identical December 2024 breach on rival crypto ATM operator Byte Federal, which uncovered private information of greater than 58,000 customers.
Bitcoin Depot is presently the most important crypto ATM operator in the US, with a community of over 8,000 kiosks nationwide.
