BITCOIN Depot, the largest Bitcoin ATM operator in the United States, said in an SEC filing that it detected an intrusion into its IT systems on 23 March 2026, with the attacker obtaining credentials for digital asset settlement accounts and stealing roughly 50.903 bitcoin (worth about $3.6 million) from its wallets.
The company offered a preliminary estimate of loss of approximately $3.665 million, noting the ultimate impact may differ as investigations continue, and that the incident was contained to the corporate environment and did not affect customer platforms, divisions, systems, data or environments.
In July 2025, Bitcoin Depot also disclosed a data breach affecting more than 26,000 individuals, with personal information including names, phone numbers, email addresses, dates of birth, physical addresses, and driver’s licence numbers exposed. The piece also references that days earlier threat actors believed to be operating out of North Korea stole $285 million from the DeFi platform Drift. Written by Eduard Kovacs, the report was published on 9 April 2026.