Decrypt.Co Bitcoin Depot Suffers $3.7 Million Theft in Cyberattack
Article Content
- •Bitcoin Depot lost approximately $3.665 million in a cyberattack on March 23, 2026.
- •The breach involved compromised credentials for digital asset settlement accounts.
- •No customer data was accessed, and the incident was contained to corporate systems.
Bitcoin Depot Inc. reported a cyberattack on March 23, 2026, resulting in the theft of approximately 50.903 Bitcoin, valued at $3.665 million. The attackers gained unauthorized access to the company's IT systems by compromising credentials linked to digital asset settlement accounts. Upon detection, Bitcoin Depot activated its incident response protocols, engaged external cybersecurity experts, and notified law enforcement. The breach was contained to corporate systems, with no evidence of customer data exposure. The company classified the incident as material due to potential reputational and regulatory consequences. Bitcoin Depot maintains cybersecurity insurance, but recovery of losses is uncertain. The investigation is ongoing, with third-party specialists analyzing the breach's scope and method.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (16)
Following this threat?
Track Bitcoin Depot in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host… 
PHP2Shell Vulnerabilities Exploited by AI-Driven Attackers Threat actors have exploited PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) to target a government entity in Europe, gaining access to sensitive data within two hours of the initial breach. The attackers utilized AI tools for reconnaissance and post-exploitation activities, including accessing…