A significant cybersecurity incident occurred on March 23, 2026, when hackers breached Bitcoin Depot, the largest US Bitcoin ATM operator, and stole login credentials, resulting in the theft of approximately 50.9 Bitcoin, valued at $3.6 million. The attackers gained control of the company's digital asset settlement accounts, enabling unauthorized transactions. Bitcoin Depot notified the SEC of the breach, disclosing that an unauthorized party had accessed its systems and stolen credentials1. The breach highlights the evolving nature of cyber attacks, which can have far-reaching consequences. The fact that the breach involved the SEC suggests that regulatory and supply-chain effects may be forthcoming. This incident matters to practitioners because it underscores the importance of robust security measures to protect against credential theft and unauthorized access, particularly in the cryptocurrency sector, where the potential for significant financial losses is high.
Bitcoin Depot hack leads to $3.6M Bitcoin theft via stolen credentials
⚡ High Priority
Why This Matters
A breach involving SEC signals evolving attack methods — watch for downstream regulatory and supply-chain effects.
References
- SecurityAffairs. (2026, April 10). Bitcoin Depot hack leads to $3.6M Bitcoin theft via stolen credentials. SecurityAffairs. https://securityaffairs.com/190578/cyber-crime/bitcoin-depot-hack-leads-to-3-6m-bitcoin-theft-via-stolen-credentials.html
Original Source
SecurityAffairs
Read original →