- Bitcoin Depot disclosed in an April 8 SEC filing that 50.9 BTC, worth approximately US$3.665 million, was stolen after hackers compromised internal IT systems and settlement-account credentials on March 23.
- The company said customer-facing platforms and user data were unaffected, with the breach confined to an internal hot wallet used for settlement between the operator and its kiosk network.
Bitcoin Depot disclosed that hackers stole 50.9 Bitcoin (BTC), valued at about US$3.6 million (AU$5.3 million), after breaching its internal IT systems and accessing credentials tied to digital asset settlement accounts in a late-March incident.
The Nasdaq-listed Bitcoin ATM operator revealed the breach in a Securities and Exchange Commission (SEC) filing on April 8, classifying it as material and citing potential reputational harm, legal exposure, regulatory scrutiny, and response costs.
The company said attackers entered its corporate IT environment on March 23 and used compromised credentials to execute unauthorised withdrawals from a hot wallet used for internal settlement between the firm and its kiosk network.
Read more: Bitcoin Bullish Shift Gains Momentum as Iran Ceasefire Eases Market Tensions
Customer Funds Untouched, Allegedly
Bitcoin Depot stated that customer-facing systems and user data were not affected. The breached account handled only internal settlement flows and had no connection to customer wallets or personal information.
The company said it initiated incident response measures, brought in external cybersecurity specialists, and notified law enforcement, but did not specify which agencies were involved or whether insurance coverage applies to the loss.
The 16-day delay between the breach and public disclosure may attract regulatory attention. SEC rules require timely reporting of material cyber incidents, and the gap may raise questions given the company’s classification of the event as material.
The breach marks the second publicly known security incident involving Bitcoin Depot. In 2023, a separate event exposed personal data linked to around 58,000 users. Note that the company operates more than 7,000 Bitcoin ATMs across North America and has been publicly listed since July 2023.
Read more: Bitcoin ETFs See $471M Inflow Surge as BlackRock’s IBIT Leads
Credit: Source link
