Bitcoin Depot reports data breach exposing information of 26,732 users
Learn More
Bitcoin Depot, Inc., which operates the largest global network of Bitcoin ATMs, is reporting a data breach that compromised the personal information of 26,732 individuals. The Atlanta-based cryptocurrency ATM company detected suspicious activity on its information systems on June 23, 2024, but delayed public notification for nearly one year due to an ongoing federal law enforcement investigation that concluded in June 2025.
The breach occurred when an unauthorized individual gained access to documents containing sensitive customer information stored within Bitcoin Depot's systems. The company started an investigation with third party experts. By July 18, 2024, the investigation was complete and confirmed that personal information had been compromised.
Notification to affected customers was delayed because of a request from federal law enforcement to delay public disclosure until their investigation was complete.
The compromised information includes:
- Names
- Phone numbers
- Driver's license numbers
- Email addresses
- Physical addresses
- Dates of birth
The nature of the attack is not disclosed.
The federal investigation concluded on June 13, 2025, approximately one year after the initial breach, allowing the company to proceed with customer notifications.
The company expressed regret for the incident and emphasized that it takes data security very seriously, but did not offer identity theft protection services to affected customers.
