HackingCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Bitcoin Depot Inc.
bd_a4cb033b61a835df · schema v1 · pii pii-v1
Full breach record for Bitcoin Depot Inc. →Bitcoin Depot, Inc. detected unusual activity on June 23, 2024, leading to an investigation that identified unauthorized access to customer personal information, including names, phone numbers, and driver's license numbers. The company engaged third-party experts and cooperated with federal law enforcement, which delayed notification until June 2025. Affected individuals are offered 12 months of credit monitoring and fraud assistance.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_39a3aa427658f320New Hampshire State AGfiled 2025-07-07Verified
- bd_c8e4dfe81f19909fWashington State AGfiled 2025-07-07Candidate
- bd_d025a49725576809Maine State AGfiled 2025-07-07Verified
- bd_6665603a5e4b86d9Texas State AGfiled 2025-07-08(1d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 1d gap
- bd_ccd7536ef7afb0dcIndiana State AGfiled 2025-07-08(1d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-605105
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 7, 2025
- Raw hash
- 47a3ab94d39c280d682f8f28c25aed13370f84666b651cffd33faa30e5e1a587
Reporting entity
- Name
- Bitcoin Depot Inc.norm: bitcoin depot
- Domain
- bitcoindepot.com
Victim entity
- Name
- Bitcoin Depot Inc.norm: bitcoin depot
- Domain
- bitcoindepot.com
Incident
- Discovered
- Jun 23, 2024
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unknown
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Federal law enforcement requested that Bitcoin Depot wait to provide notice until after they completed the investigationLaw enforcement advised Bitcoin Depot on June 13, 2025, that their investigation was complete
Compliance
- Time to disclose
- 13 months(379 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.