Government

Bitcoin Depot loses $3.6M in cyberattack

Adobe Stock

April 14, 2026

Summarize with

Bitcoin Depot disclosed in a regulatory filing that a cyberattack on its internal systems led to the theft of more than 50 bitcoin, valued at about $3.66 million. The company said in the filing that it detected unauthorized access to parts of its IT infrastructure on March 23, after attackers used compromised credentials tied to digital asset settlement accounts to transfer 50.903 bitcoin from company-controlled wallets before access was cut off. Bitcoin Depot, which operates more than 25,000 bitcoin ATMs, said the breach was limited to its corporate environment and did not affect customer-facing systems or data.

The company activated its incident response plan, engaged external cybersecurity experts and notified law enforcement. It warned the breach could lead to reputational harm, regulatory scrutiny and financial costs, noting insurance coverage may not fully offset losses. Bitcoin Depot deemed the incident material on April 6, though the investigation is ongoing and the final impact remains uncertain. The attack follows a prior 2025 breach that exposed personal information of nearly 26,000 individuals, underscoring continued security challenges for the company.

In other news, Bitcoin Depot has appointed Tony Gagliardi as chief compliance officer, according to a press release. In the role, Gagliardi will oversee the company's compliance program, including anti-money laundering and Know-Your-Customer initiatives, licensing, transaction monitoring and broader risk management. He will report directly to CEO Alex Holmes.

Gagliardi brings more than 15 years of experience across banking, payments, fintech and digital assets. His background includes senior compliance roles at cryptocurrency firms such as OKX, Paxos and Coinbase, as well as positions at HSBC and Standard Chartered.