On June 23, 2024, Bitcoin Depot Inc., the largest Bitcoin ATM operator in North America, experienced a data breach that exposed sensitive personal information of thousands of individuals. The breach was discovered on July 18, 2024, and has since been reported to multiple state authorities. According to disclosures, a total of 26,732 people in the United States were affected.
The breach involved unauthorized access to a range of personally identifiable information (PII), including names, addresses, dates of birth, driver’s license numbers, email addresses and phone numbers.
Bitcoin Depot notified the California Attorney General's office on July 7, 2025, as well as the Maine, New Hampshire, and Texas Attorneys General on the same day. The Massachusetts Attorney General was notified on July 8, 2025. The number of affected individuals by state included 1,683 in Texas, 11 in Maine, 20 in New Hampshire, and 784 in Massachusetts. The company began notifying impacted consumers by U.S. Mail on July 8, 2025.
Bitcoin Depot Inc. responded to the breach by promptly notifying state authorities and affected consumers. Notifications were sent by U.S. Mail beginning July 8, 2025, in accordance with state laws.
While the company has not publicly disclosed the technical details of how the breach occurred or who was responsible, the nature of the information exposed—names, addresses, dates of birth, driver’s license numbers, email addresses and phone numbers—means that those affected should remain vigilant against potential identity theft and phishing attempts.
Individuals who received a notice should consider taking the following steps:
Bitcoin Depot has not indicated whether they are offering credit monitoring or identity protection services, so affected individuals may wish to explore these options independently for additional peace of mind.
To learn more about the company, its services or to find a Bitcoin Depot ATM location, visit the Bitcoin Depot website.