Skip to content

Bitcoin Depot

Disclosed Jul 7, 20251 year ago26,732 affectedConfirmed

Official notice

Bitcoin Depot discloses 2024 breach exposing 27,000 customers

Bitcoin ATM operator Bitcoin Depot said it detected suspicious activity on June 23, 2024 and found an intruder obtained customer documents; disclosure was delayed by a federal investigation. Bitcoin Depot estimated nearly 27,000 people were affected.

What is known

People affected26,732 (as reported by the organization)
DisclosedJul 7, 2025
DiscoveredJun 23, 2024
HappenedJun 23, 2024
AttackHacking
Data exposedNames, Dates of birth, Addresses, Government IDs, Phone numbers, Emails
SectorCrypto · US
StatusConfirmed

Sources

Source
California Attorney General breach notice: Bitcoin Depotoag.ca.gov · Official notice
Washington Attorney General breach notice: Bitcoin Depotatg.wa.gov · Official notice
Bitcoin Depot breach exposes data of nearly 27,000 crypto usersbleepingcomputer.com · News
Indiana Attorney General 2025 data breach report: Bitcoin Depotin.gov · Official notice

Notices filed

WhereFiledPeople
California AGresidents of CAJul 7, 2025
Washington AGresidents of WAJul 7, 20253,486
ResearchtotalJul 7, 2025
Indiana AGresidents of INJul 8, 20254

Other breaches at Bitcoin Depot

BreachAffected
Bitcoin Depot says hackers stole about 50.9 BTC from company walletsApr 85 months agoHackingUnknown
History of this record
  • 2026-09-25 · records_basis: empty to organization · backfill source
  • 2026-09-25 · records: empty to 26732 · backfill source
  • 2026-09-25 · data_types: [] to ["names","dob","addresses","government-id","phone","emails"] · seed source
  • 2026-09-25 · summary: empty to Bitcoin ATM operator Bitcoin Depot said it detected suspicious activity on June 23, 2024 and found an intruder obtained customer documents; disclosure was delayed by a federal investigation. Bitcoin Depot estimated nearly 27,000 people were · seed source
  • 2026-09-25 · title: empty to Bitcoin Depot discloses 2024 breach exposing 27,000 customers · seed source
  • 2026-09-25 · attack: unknown to hacking · backfill source
  • 2026-09-25 · discovered: empty to 2024-06-23 · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Bitcoin Depot

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.