Bitcoin Depot Reports $3.665 Million Theft After Corporate Breach
Summary
Bitcoin Depot says an unauthorized party accessed corporate IT systems, stole settlement-account credentials and transferred about 50.903 BTC ($3.665 million) from company wallets. The company believes the incident was contained and customer platforms were unaffected.
Key points
- Bitcoin Depot says it discovered unauthorized access to some corporate IT systems on March 23, 2026.
- The attackers reportedly stole credentials to digital asset settlement accounts and transferred about 50.903 BTC, valued at approximately $3.665 million, from company-controlled wallets.
- The company says it activated incident response, engaged external cybersecurity experts and notified law enforcement.
- Bitcoin Depot believes the incident was contained to its corporate environment and did not affect customer platforms, systems or data.
- The company determined the incident was material on April 6 and warned that its cyber insurance may not cover all resulting losses.
Article Details
- Victim Organization
- Bitcoin Depot
- Incident Type
- Unauthorized access to corporate IT systems, theft of credentials to digital asset settlement accounts, and unauthorized transfer of cryptocurrency from company-controlled wallets
- Incident Date
- 2026-03-23
- Data Types Exposed
- Credentials to digital asset settlement accounts
- Operational Impact
- Approximately 50.903 BTC, valued at about $3.665 million as of the report date, was transferred without authorization. Bitcoin Depot says the incident was contained to its corporate environment and did not affect customer platforms, divisions, systems, data, or environments. The company activated incident response, engaged external cybersecurity experts, notified law enforcement, and said insurance might not cover all losses.
- Claim Status
- confirmed