Bitcoin Depot Data Breach Affects 26,732 Americans

Published
July 11, 2025
Updated
July 11, 2025
Bitcoin Depot Data Breach Affects 26,732 Americans
Bitcoin Depot
Types of INFORMATION affected
  • Names
    Names
  • Social security numbers
    Social Security Numbers
  • Dates of birth
    Dates of Birth
  • Addresses
    Addresses
  • Government IDs
    Government IDs
  • Medical Information
    Medical Info
  • Financial Info
    Financial Info

Affected by the

Bitcoin Depot

data breach?

Join the Lawsuit

It's free to join. 

On June 23, 2024, Bitcoin Depot Inc., the largest Bitcoin ATM operator in North America, experienced a data breach that exposed sensitive personal information of thousands of individuals. The breach was discovered on July 18, 2024, and has since been reported to multiple state authorities. According to disclosures, a total of 26,732 people in the United States were affected.

The breach involved unauthorized access to a range of personally identifiable information (PII), including names, addresses, dates of birth, driver’s license numbers, email addresses and phone numbers.

Bitcoin Depot notified the California Attorney General's office on July 7, 2025, as well as the Maine, New Hampshire, and Texas Attorneys General on the same day. The Massachusetts Attorney General was notified on July 8, 2025. The number of affected individuals by state included 1,683 in Texas, 11 in Maine, 20 in New Hampshire, and 784 in Massachusetts. The company began notifying impacted consumers by U.S. Mail on July 8, 2025.

Bitcoin Depot's response

Bitcoin Depot Inc. responded to the breach by promptly notifying state authorities and affected consumers. Notifications were sent by U.S. Mail beginning July 8, 2025, in accordance with state laws.

While the company has not publicly disclosed the technical details of how the breach occurred or who was responsible, the nature of the information exposed—names, addresses, dates of birth, driver’s license numbers, email addresses and phone numbers—means that those affected should remain vigilant against potential identity theft and phishing attempts.

Individuals who received a notice should consider taking the following steps:

  • Review the notification letter for specific guidance and any resources offered by Bitcoin Depot
  • Monitor bank, credit card and cryptocurrency accounts for suspicious activity
  • Consider placing a fraud alert or security freeze on credit files
  • Be cautious of unsolicited communications seeking further personal information
  • Report any suspected identity theft to the Federal Trade Commission and local law enforcement

Bitcoin Depot has not indicated whether they are offering credit monitoring or identity protection services, so affected individuals may wish to explore these options independently for additional peace of mind.

To learn more about the company, its services or to find a Bitcoin Depot ATM location, visit the Bitcoin Depot website.

Notice Letter

This browser does not support inline PDFs. Please download the PDF to view it: Download PDF

Affected Entity
Bitcoin Depot
Consumers Notification date
July 08, 2025
Date of Breach
June 23, 2024
Breach Discovered Date
July 18, 2024
Total People Affected
26732
Information Types Exposed
  • Drivers Licenses
  • Name of individual
  • Address
  • Driver’s License number
  • Other
  • Date of Birth
  • email
  • names
  • phone number
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image