More than 26,000 customers of Bitcoin Depot are only now learning that their personal data may have been compromised in a cyberattack that took place over a year ago. The breach, which involved sensitive documents such as driver’s licenses and contact details, remained undisclosed until federal authorities gave clearance to notify victims this month.
Notification Arrives One Year After the Breach Was Detected
On July 8, 2025, Bitcoin Depot began sending letters to 26,732 individuals impacted by a security incident that actually took place on June 23, 2024. The delayed disclosure, as stated in the company’s filing with the Maine Attorney General’s Office, was due to a request from federal law enforcement to withhold notice until their investigation concluded.
The official go-ahead to inform customers came nearly a year later—on June 13, 2025.
What Information Was Compromised in the Attack?
The breach exposed personal data from internal customer documents, including:
- Names
- Phone numbers
- Driver’s license numbers
- In some cases: physical addresses, dates of birth, and email addresses
The company confirmed the breach involved unauthorized access to customer records, though it did not disclose exactly how many of the affected individuals had their full identity data accessed.
Company Statement and Security Response
In its notice to affected customers, Bitcoin Depot stated:
“Bitcoin Depot, Inc. detected unusual activity on its information systems and immediately commenced an investigation, which included engaging third-party incident response experts to assist in determining the extent of any unauthorized activity.”
The company emphasized that it takes data protection seriously and has implemented improved measures including enhanced monitoring, increased staff awareness, and broader security upgrades aimed at preventing similar breaches.
Customers are being advised to monitor financial accounts and credit reports for unusual activity and to stay alert for phishing attempts or identity misuse.
Bitcoin Depot’s Role in the Crypto Ecosystem
Bitcoin Depot is a publicly traded company with a market valuation of approximately $380 million. It operates thousands of Bitcoin ATMs and checkout locations across the U.S., enabling cash-to-crypto transactions for retail users.
While the firm plays a significant role in crypto accessibility, the breach highlights ongoing data security challenges in the digital asset sector—particularly for companies that handle physical identity verification as part of compliance requirements.
As of now, Bitcoin Depot has not indicated whether affected users will receive identity protection or credit monitoring support. The company has also not disclosed further technical details about the breach or the attackers involved.
