Bitcoin Depot Reports $3.7 Million Theft from Cyber Attack on Corporate Systems

Severity: Medium (Score: 51.9)

Sources: Investing, Decrypt.Co

Summary

Bitcoin Depot Inc. reported a cyber attack on March 23, 2026, resulting in the theft of approximately 50.9 BTC, valued at $3.665 million. The attackers gained unauthorized access to the company's IT systems and obtained credentials for digital asset settlement accounts, allowing them to transfer the cryptocurrency without permission. Following the breach, Bitcoin Depot activated incident response protocols, engaged external cybersecurity experts, and notified law enforcement. The company confirmed that customer-facing platforms and user data were unaffected by the breach. The incident has been classified as material due to potential reputational damage and associated costs. Bitcoin Depot maintains insurance coverage for cybersecurity incidents, but it is uncertain if this will fully cover the losses. The investigation into the incident is ongoing, with efforts to reinforce IT systems against future attacks. This incident follows a previous breach in 2023 that compromised user data for 58,000 individuals. Key Points: • Bitcoin Depot lost approximately $3.665 million in a March 23 cyber attack. • The breach involved unauthorized access to digital asset settlement account credentials. • Customer data and platforms remained unaffected, but the incident is deemed material.

Key Entities

• Data Breach (attack_type)
• Bitcoin Depot Inc (company)
• T1078 - Valid Accounts (mitre_attack)