Clustered 6 filings across 6 jurisdictions · filing window Jul 7, 2025 → Jul 8, 2025. View entity profile → Other incidents for this victim →
incident inc_1c5024ef3c6e4a12 · merge_method deterministic · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
CA IN ME NH TX WA
Time between earliest and latest filing
Not recorded for this incident
Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster.
all State AG
per-filing reported counts
State AGs report only their own residents; bars show per-filing counts.
Earliest sighting first · deep chronology in Litigation Timeline
Jun 23, 2024
When the intrusion reportedly occurred, per the linked filings
Jun 23, 2024
Reported by NEW HAMPSHIRE AG, CALIFORNIA AG, WASHINGTON AG filings
Jul 18, 2024
Reported by MAINE AG, TEXAS AG filings
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
Bitcoin Depot, Inc. notified 20 New Hampshire residents of a data security incident detected on June 23, 2024. Unauthorized access resulted in the exfiltration of customer names, phone numbers, driver's license numbers, and potentially addresses, DOBs, and emails. Notification was delayed at the request of federal law enforcement until June 13, 2025. Notices mailed July 8, 2025.
Affected (this filing): 20
Bitcoin Depot, Inc. detected unusual activity on June 23, 2024, leading to an investigation that identified unauthorized access to customer personal information, including names, phone numbers, and driver's license numbers. The company engaged third-party experts and cooperated with federal law enforcement, which delayed notification until June 2025. Affected individuals are offered 12 months of credit monitoring and fraud assistance.
Bitcoin Depot, Inc., a finance sector entity reported a malware incident to the Washington Attorney General. The organization became aware of the incident on 2024-06-23 and filed notice on 2025-07-07. 3,486 Washington residents were affected. 379 days elapsed between awareness and notification. 0 days to identify the breach. 7 days to contain the breach.
Affected (this filing): 3,486
Bitcoin Depot, Inc. reported a data breach to the Maine Attorney General, classifying it as an external system breach or hacking incident. The breach occurred on June 23, 2024, and was discovered on July 18, 2024. The company has stated that 11 Maine residents were affected by this incident. Notification to the affected individuals is scheduled for July 8, 2025.
Affected (this filing): 11
Bitcoin Depot, Inc based in Atlanta, Georgia, a financial services entity reported a data breach to the Texas Attorney General. The breach was discovered on 2024-07-18 and reported on 2025-07-08. 1,683 Texas residents were affected. 26,732 individuals affected in total. Types of information involved: Name of individual;Address;Driver’s License number;Other;Date of Birth. Consumers were notified via U.S. Mail.
Affected (this filing): 1,683
Bitcoin Depot Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2024-06-09 and was reported on 2025-07-08. 4 Indiana residents were affected. 26,732 individuals affected in total.
Affected (this filing): 26,732