Bitcoin Depot Inc.

On March 23, 2026, Bitcoin Depot Inc. discovered unauthorized access to certain IT systems in which an actor obtained control of credentials associated with the Company's digital asset settlement accounts and transferred approximately 50.903 Bitcoin (~$3.665 million) from Company-controlled wallets. The Company believes the incident was contained to its corporate environment and did not affect customer platforms; no evidence of customer PII access identified. Materiality determined April 6, 2026.

Bitcoin Depot, Inc based in Atlanta, Georgia, a financial services entity reported a data breach to the Texas Attorney General. The breach was discovered on 2024-07-18 and reported on 2025-07-08. 1,683 Texas residents were affected. 26,732 individuals affected in total. Types of information involved: Name of individual;Address;Driver’s License number;Other;Date of Birth. Consumers were notified via U.S. Mail.

Bitcoin Depot Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2024-06-09 and was reported on 2025-07-08. 4 Indiana residents were affected. 26,732 individuals affected in total.

Bitcoin Depot, Inc. notified 20 New Hampshire residents of a data security incident detected on June 23, 2024. Unauthorized access resulted in the exfiltration of customer names, phone numbers, driver's license numbers, and potentially addresses, DOBs, and emails. Notification was delayed at the request of federal law enforcement until June 13, 2025. Notices mailed July 8, 2025.

Bitcoin Depot, Inc. detected unusual activity on June 23, 2024, leading to an investigation that identified unauthorized access to customer personal information, including names, phone numbers, and driver's license numbers. The company engaged third-party experts and cooperated with federal law enforcement, which delayed notification until June 2025. Affected individuals are offered 12 months of credit monitoring and fraud assistance.

Bitcoin Depot, Inc., a finance sector entity reported a malware incident to the Washington Attorney General. The organization became aware of the incident on 2024-06-23 and filed notice on 2025-07-07. 3,486 Washington residents were affected. 379 days elapsed between awareness and notification. 0 days to identify the breach. 7 days to contain the breach.

Bitcoin Depot, Inc. reported a data breach to the Maine Attorney General, classifying it as an external system breach or hacking incident. The breach occurred on June 23, 2024, and was discovered on July 18, 2024. The company has stated that 11 Maine residents were affected by this incident. Notification to the affected individuals is scheduled for July 8, 2025.