Bitcoin Depot says attackers stole more than $3.6 million in bitcoin after breaching its internal systems, a theft the crypto ATM operator disclosed in a recent regulatory filing. The company said an unauthorized actor moved about 50.903 bitcoin from company-controlled wallets without authorization.
Bitcoin Depot detected suspicious activity on March 23 and immediately began its incident response procedures, while also bringing in external cybersecurity experts and notifying law enforcement. The stolen bitcoin was valued at about $3.665 million at the time of the report.
The breach was limited to Bitcoin Depot’s corporate environment, the company said, and did not affect customer systems. That matters because Bitcoin Depot operates more than 25,000 bitcoin ATM and BDCheckout locations worldwide, making the security of its back-end systems central to a business built on physical access points and digital wallets.
The remaining question is how far the intrusion reached before it was contained, and whether the company can reassure users and business partners that the systems behind its sprawling network were not exposed. For now, Bitcoin Depot’s account suggests the damage was financial and internal rather than customer-facing, but the loss still lands on a company whose scale makes even a single breach hard to ignore.
