---
title: "Bitcoin Depot Breach Sees 50 BTC Worth $3.7M Stolen"
date: 2026-04-09
author: "Sofia Ramirez"
featured_image: "https://sqmagazine.co.uk/wp-content/uploads/2026/04/bitcoin-depot-breach-causes-3m-loss.jpg"
categories:
  - name: "Cybersecurity"
    url: "/cybersecurity.md"
tags:
  - name: "News"
    url: "/tag/news.md"
---

# Bitcoin Depot Breach Sees 50 BTC Worth $3.7M Stolen

Bitcoin Depot has disclosed that more than 50 BTC worth approximately $3.7 million was stolen after a cyberattack on its internal systems.

## Quick Summary – TLDR:

- Over 50 BTC were stolen from corporate wallets after a cyberattack on March 23, 2026.
- The breach involved compromised credentials linked to settlement accounts.
- Customer platforms and user data were not affected, according to the company.
- The firm faces potential regulatory, legal, and reputational risks despite stable operations.

## What Happened?

Bitcoin Depot revealed that an unauthorized party accessed its internal systems and stole **50.903 BTC**, valued at roughly **$3.6 million to $3.7 million** at the time of the incident. The breach was first detected on **March 23, 2026**, and later disclosed in an SEC filing on April 8.

The attacker gained access to **sensitive credentials tied to digital asset settlement accounts**, enabling the transfer of funds from company controlled wallets.

> NEW: Hacker steals 50.9 BTC ($3.7M) from Bitcoin Depot, after gaining access to internal systems linked to corporate wallets. [pic.twitter.com/U8JV12W6UR](https://t.co/U8JV12W6UR)
> 
> — Bitcoin News (@BitcoinNewsCom) [April 9, 2026](https://twitter.com/BitcoinNewsCom/status/2042243310220099806?ref_src=twsrc%5Etfw)

 ## Cyberattack Details and Immediate Response

According to the company’s filing, the breach was limited to its **corporate IT environment**, with no evidence suggesting that customer systems or personal data were compromised.

The company stated:

“

The Company further believes that the incident was contained to the Company’s corporate environment and did not affect the Company’s customer platforms, divisions, systems, data or environments.

Bitcoin Depot





Once the intrusion was detected, Bitcoin Depot activated its **incident response protocols**, working with **external cybersecurity experts** and notifying **law enforcement authorities**. The firm is also conducting an ongoing investigation to determine the full scope of the attack.

Additionally, the company confirmed:

- **No confirmed exposure of customer personally identifiable information.**
- **Continued normal operations across its [Bitcoin](https://sqmagazine.co.uk/bitcoin-statistics/) ATM network.**
- **Efforts underway to strengthen infrastructure and prevent future breaches.**

## Financial Impact and Insurance Uncertainty

Bitcoin Depot recorded a **preliminary loss of approximately $3.665 million**, representing the fair value of the stolen Bitcoin at the time of the incident.

“**The Company has recorded a preliminary estimate of loss of approximately $3.665 million**,” the filing noted, while adding that the final impact may change as the investigation continues.

Although the company maintains **[cybersecurity insurance](https://sqmagazine.co.uk/cyber-insurance-statistics/) coverage**, it warned that there is **no guarantee** the policy will fully cover the losses.

Management initially stated the breach did not materially affect operations. However, it later classified the incident as **material** due to possible:

- **Reputational damage**
- **Regulatory scrutiny**
- **Legal and response costs**

## Regulatory Pressure and Past Incidents

The breach comes at a time when Bitcoin Depot is already facing **increased regulatory oversight**.

In a recent development, **Connecticut regulators** suspended the company’s **money transmission license**, alleging that it charged fees exceeding the state’s **15 percent limit** on more than 1,000 transactions. Authorities claimed this resulted in around **$150,000 in excess charges** for roughly 500 customers.

The company has also dealt with a previous **[data breach](https://sqmagazine.co.uk/data-breach-statistics/) disclosure in 2025**, where over **26,000 individuals** were affected. That incident involved exposure of personal details such as names, addresses, and identification numbers, although the disclosure was delayed due to a law enforcement investigation.

## SQ Magazine’s Takeaway

From my perspective, this incident highlights a recurring issue in crypto infrastructure, which is **internal security vulnerabilities rather than external platform flaws**. I found it notable that customer systems were not impacted, which suggests **strong segmentation**, but the breach of settlement credentials raises serious concerns.

In my experience, even if funds are recovered through insurance, the **trust factor takes a much bigger hit**. With rising regulatory pressure and past incidents already in play, Bitcoin Depot now faces a critical moment where **security improvements must be visible and immediate** to maintain credibility.