Bitcoin Depot Reports $3.665 Million Bitcoin Theft After Systems Breach
Summary
Bitcoin Depot disclosed that attackers used compromised credentials for digital-asset settlement accounts to transfer 50.903 BTC (about $3.665 million) from company-controlled wallets. It reports no evidence of customer-system impact; the investigation continues.
Key points
- Bitcoin Depot said the incident occurred on March 23, 2026, after an unauthorized party accessed parts of its internal IT environment.
- The company reported that compromised credentials tied to digital-asset settlement accounts were used to transfer 50.903 Bitcoin from company-controlled wallets.
- The company’s preliminary loss estimate is approximately $3.665 million.
- Bitcoin Depot reports no evidence so far that customer-facing platforms or customer data were affected; the investigation remains ongoing.
- The company activated incident response, engaged external cybersecurity specialists, and notified law enforcement.
- Bitcoin Depot is reviewing access controls and credential management; it said insurance may cover part of the loss, but recovery is not guaranteed.
Article Details
- Victim Organization
- Bitcoin Depot Inc.
- Incident Type
- Unauthorized access to internal IT systems using compromised credentials, followed by unauthorized transfers of cryptocurrency from company-controlled wallets.
- Incident Date
- 2026-03-23
- Operational Impact
- Bitcoin Depot reported a preliminary loss of approximately 50.903 Bitcoin, valued at about $3.665 million at the time. The company said it did not expect a significant impact on its overall financial condition or operational performance. It reported no evidence that customer-facing platforms or customer data were affected; the investigation is ongoing.
- Claim Status
- confirmed