DisclosureLens
FEDERALItem 1.05 · mandatoryHackingFinancial ServicesTechnologyFinanceDepository CreditStolen CredentialsHighActive

Bitcoin Depot Inc.

bd_e7d2c7760ef16931 · schema v1 · pii pii-v1

Severity

High

Financial impact

$3.67M

Discovered

Mar 23, 2026

Filed

Apr 8, 2026

To disclose

16 days

Affected

Not disclosed

Confidence

91%
Full breach record for Bitcoin Depot Inc. →2 incidents on file

On March 23, 2026, Bitcoin Depot Inc. discovered unauthorized access to certain IT systems in which an actor obtained control of credentials associated with the Company's digital asset settlement accounts and transferred approximately 50.903 Bitcoin (~$3.665 million) from Company-controlled wallets. The Company believes the incident was contained to its corporate environment and did not affect customer platforms; no evidence of customer PII access identified. Materiality determined April 6, 2026.

SEC clockMateriality determined Apr 6, 2026 → Filed Apr 8, 20262d ✓ SEC 4-day OK16 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 16 days

Mar 23, 2026

Discovered

Apr 6, 2026

Scope determined

Apr 8, 2026

Filed

vs. sector median

7 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statementThis record

Unlocks: materiality, stated response, full audit trail. Ceiling removed.