Breaches · 173 days ago
Bitcoin Depot's March 23 breach exposed settlement-account credentials, allowing attackers to steal over 50 Bitcoin directly from company-controlled wallets. This attack bypassed customer platforms and data, focusing instead on immediate monetary theft through internal corporate access. Standard breach responses that prioritize customer data loss miss this direct financial impact from compromised corporate secrets.
The company confirmed the intrusion affected only its IT environment and did not impact customer systems or data. The stolen Bitcoin, valued at approximately $3.665 million, was transferred before the breach was contained. Bitcoin Depot engaged cybersecurity experts and law enforcement, and the investigation is ongoing. The incident highlights the risk to firms managing digital assets through corporate settlement accounts rather than customer-facing vulnerabilities.
This breach underscores that attackers targeting crypto firms are increasingly focusing on internal settlement credentials to directly siphon funds. The damage is already done, so the primary concern is understanding the blast radius of such intrusions for firms holding digital assets. This pattern signals a shift in attacker focus from data exfiltration to immediate financial theft via corporate wallet compromise.
4 sources covering this story
Bitcoin Depot Reports $3.6m Crypto Theft After System Breach
Bitcoin Depot has disclosed a cyber-attack that led to the theft of more than 50 Bitcoin, worth $3.66m, after hackers accessed its internal systems
The Record from Recorded Future
Cryptocurrency ATM giant Bitcoin Depot reports $3.6 million stolen in cyberattack
Bitcoin Depot filed a notice with the Securities Exchange Commission (SEC) explaining that a threat actor “gained access to certain systems and obtained control of credentials associated with the company’s digital asset settlement accounts.”
$3.6 Million Stolen in Bitcoin Depot Hack
A hacker transferred more than 50 bitcoin from the Bitcoin ATM operator’s wallets after stealing credentials.
Hackers steal $3.6 million from crypto ATM giant Bitcoin Depot
Bitcoin Depot, which operates one of the largest Bitcoin ATM networks, says attackers stole $3.665 million worth of Bitcoin from its crypto wallets after breaching its systems last month.
Part of the PlainSec briefing for 2026-04-09