CyberHappenings logo
☰
Home Browse Watchlists Experimental About

Track cybersecurity events as they unfold. Sourced timelines. Filter, sort, and browse. Fast, privacy‑respecting. No invasive ads, no tracking.

Unauthorized transfer of 50.903 Bitcoin from Bitcoin Depot corporate wallets

First reported
Last updated
1 unique sources, 1 articles

Summary

Hide ▲

Attackers breached Bitcoin Depot’s corporate IT systems on March 23, 2026, and exfiltrated approximately 50.903 Bitcoin (valued at $3.665 million) from the company’s controlled wallets before access was blocked. The intrusion targeted Bitcoin Depot’s corporate environment and did not affect customer-facing platforms, systems, or data. The company activated incident response protocols, engaged external cybersecurity experts, and notified law enforcement and regulators, including the SEC.

Timeline

  1. 09.04.2026 10:44 1 articles · 2h ago

    Bitcoin Depot reports $3.665 million theft from corporate Bitcoin wallets following March 2026 intrusion

    On March 23, 2026, Bitcoin Depot discovered unauthorized access to its corporate IT systems and activated incident response procedures. Attackers exfiltrated approximately 50.903 Bitcoin from company-controlled wallets before access was blocked. The company reported the incident to law enforcement, engaged external cybersecurity experts, and filed a material incident report with the SEC on April 6, 2026.

    Show sources
    Open in new tab

Information Snippets

  • Bitcoin Depot operates over 25,000 Bitcoin ATMs and BDCheckout locations globally with 2025 revenue of $615 million.

    First reported: 09.04.2026 10:44
    1 source, 1 article
    Show sources

  • The breach was detected on March 23, 2026, following suspicious activity in the company’s IT systems.

    First reported: 09.04.2026 10:44
    1 source, 1 article
    Show sources

  • Unauthorized actors transferred approximately 50.903 Bitcoin ($3.665 million at time of report) from Bitcoin Depot’s corporate-controlled wallets before access was blocked.

    First reported: 09.04.2026 10:44
    1 source, 1 article
    Show sources

  • The incident was contained to Bitcoin Depot’s corporate environment and did not impact customer platforms, divisions, systems, data, or environments.

    First reported: 09.04.2026 10:44
    1 source, 1 article
    Show sources

  • Bitcoin Depot maintains cyber insurance but states coverage may not fully offset incident-related losses, including reputational, legal, regulatory, and response costs.

    First reported: 09.04.2026 10:44
    1 source, 1 article
    Show sources

  • In 2025, Bitcoin Depot notified nearly 26,000 individuals of a 2024 data breach involving exposure of personal information (full names, addresses, dates of birth, driver’s license numbers, email addresses, and phone numbers).

    First reported: 09.04.2026 10:44
    1 source, 1 article
    Show sources