Over 26,000 Bitcoin Depot customers learn of data breach one year later

Bitcoin Depot, a publicly traded bitcoin ATM company, has informed thousands of individuals that their sensitive data, including driver’s license numbers, may have been stolen. The breach happened a year ago, but victims are only now receiving notification letters.

Starting July 8th, 2025, 26,732 consumers will receive letters from Bitcoin Depot about a hack that happened a year ago and exposed sensitive information.

According to a filing with the Maine Attorney General’s Office, the data breach occurred on June 23rd, 2024. The company explained that federal law enforcement had requested that it wait until an investigation was complete before providing notices to affected individuals. Almost a year later, on June 13th, 2025, the authorities finally gave the green light.

“Bitcoin Depot, Inc. detected unusual activity on its information systems and immediately

commenced an investigation, which included engaging third-party incident response experts to assist in determining the extent of any unauthorized activity,” the company’s notice to affected individuals reads.

An unauthorized individual obtained personal information contained within documents related to some Bitcoin Depot customers, including:

• Names
• Phone numbers
• Driver's license numbers
• In some instances, physical addresses, dates of birth, and/or emails.

Bitcoin Depot expressed regret for the incident and said that it takes data security very seriously. The company assures it has already taken steps to “prevent a reoccurrence by enhancing security measures and security monitoring, and increasing company awareness of data security protection.”

The firm also recommends monitoring financial account statements and credit reports for suspicious or unusual activity.

Bitcoin Depot is a publicly traded bitcoin ATM company with a market capitalization of around $380 million. The company operates a network of thousands of bitcoin ATMs and other physical checkout locations.